last executing test programs: 9.896617121s ago: executing program 3 (id=3837): creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) unshare(0x2000400) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x40, 0x4}, 0x1}}, 0x10) listen(r2, 0x0) recvmmsg(r2, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/148, 0x94}], 0x1}}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5202) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000080000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x2000400) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}}) ppoll(&(0x7f0000002240)=[{}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 8.885142585s ago: executing program 0 (id=3842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}], {0x14}}, 0x3c}}, 0x0) 8.871443986s ago: executing program 3 (id=3843): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) 8.712229979s ago: executing program 3 (id=3845): openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x0) getpid() syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f00000002c0)="be", 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='attr/fscreate\x00') r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, 0x0}, 0x4000000}], 0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x0, 0x5, 0x9, 0xb, 0xd, "eee57066387e78dbc43bf81b054b9199e295fe"}) 8.70373713s ago: executing program 0 (id=3846): socket$nl_route(0x10, 0x3, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ec3ca1c0c"], 0x7) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) capset(&(0x7f00000000c0), &(0x7f0000000100)) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001240)='smaps\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4066, 0xfe2}], 0x1, 0xfffffff7, 0x0) syz_emit_vhci(0x0, 0x9) semctl$GETVAL(0x0, 0x0, 0xc, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) io_uring_setup(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 8.665219523s ago: executing program 1 (id=3847): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x101480, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000500)=ANY=[@ANYBLOB="d00000009078000013040000", @ANYRES64=r0], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 7.047971737s ago: executing program 1 (id=3849): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.636783891s ago: executing program 3 (id=3852): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000000)=ANY=[@ANYRES32], 0x9, 0x2bc, &(0x7f0000000880)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c0108800c01008006000500070000002400020086650b35f0b4c2dc04a95e352f55e8204db1e72262099a4daa6bd5d598d1ecdb24000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e24ac1e0001000000000000000008000300000000009c0009801c"], 0x1d8}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.805099649s ago: executing program 1 (id=3854): socket$inet6(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000240)={0x78, 0xfffffffffffffffe}, 0x78) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) close(r0) rt_sigreturn() poll(0x0, 0x0, 0x64) rt_sigreturn() open(&(0x7f00000003c0)='./file0\x00', 0x2c641, 0xcd) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x8912, 0x0) 5.628024874s ago: executing program 1 (id=3855): syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1e, 0xd4, 0x72, 0x8, 0x112a, 0x5, 0x14a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x5a, 0x7, 0x66, 0x0, [], [{{0x9, 0x5, 0x0, 0x2}}, {{0x9, 0x5, 0xe}}, {{0x9, 0x5, 0x8}}]}}]}}]}}, 0x0) 5.523232653s ago: executing program 0 (id=3857): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x3810744, &(0x7f00000001c0)={[{}, {@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@data_err_abort}, {@grpquota}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@max_batch_time={'max_batch_time', 0x3d, 0x8000000000000000}}, {@acl}]}, 0xff, 0x46b, &(0x7f0000000800)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet(0x2, 0xa, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) fchmodat(0xffffffffffffffff, &(0x7f0000000440)='./file3\x00', 0x0) clock_gettime(0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000"], 0x2, 0x17d, &(0x7f00000004c0)="$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") syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d20257"], 0x0) execve(&(0x7f0000000040)='./file2\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 4.381192998s ago: executing program 3 (id=3860): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x15, 0x0, &(0x7f0000000140)="69015438a420bbea40bb7d94bc9db57325f4528ae6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000002203"]}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00032a0000002a03"]}, 0x0) 3.976542581s ago: executing program 4 (id=3861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="6eab6883cb97ca6d0581a6215c12c30d4756f0460bb0e257650adc51acfbe726f2a785c8129c23f9970dfa9448f64d14de5ec7430702527a676d93bb807e9b6dbc04124cae66873d22bbd27331583225980b1dcc6545a01e52d4c59d9b8d544069d6506d5679c593aae89ca83ba770527ea1215ff0b0f44af70933b9289186bf7851c94822503089f1cbcdca8ba1792bfb8c4fbbe59fb38c863aba42c6de347ecec20b8260ce59ac825b070464a90d8662ed99328bbd54f1fd2241a4fe7ccaed1bdf1edc6671f45757c144110ae359c9509321b0aa4d8489b340914b655495b17ee2", @ANYRESOCT, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x38, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}]}]}, 0x38}}, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='statm\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0x10d}], 0x1, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 3.73976352s ago: executing program 1 (id=3862): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @multicast1}, 0xaf}) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x8]}, &(0x7f0000000280)=0x78) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x4e22, @rand_addr=0x64010101}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='lo\x00', 0xffffffff}) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, 0x1c) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x83, &(0x7f0000000200), 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 3.489436771s ago: executing program 2 (id=3863): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000390009000c00000000000010040000000400008010000180c9b6c6a3304743a61201"], 0x30}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f00000022c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2002, 0x0, 0x12, r4, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) 2.961173285s ago: executing program 2 (id=3864): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x14) listen(r0, 0xfffffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) 2.913980829s ago: executing program 2 (id=3865): socket$inet6(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000240)={0x78, 0xfffffffffffffffe}, 0x78) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) close(r0) rt_sigreturn() poll(0x0, 0x0, 0x64) rt_sigreturn() open(&(0x7f00000003c0)='./file0\x00', 0x2c641, 0xcd) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x8912, 0x0) 2.796086289s ago: executing program 2 (id=3866): creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) unshare(0x2000400) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x40, 0x4}, 0x1}}, 0x10) listen(r2, 0x0) recvmmsg(r2, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/148, 0x94}], 0x1}}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5202) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000080000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x2000400) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}}) ppoll(&(0x7f0000002240)=[{}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 2.697267577s ago: executing program 1 (id=3867): socket$nl_route(0x10, 0x3, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ec3ca1c0c"], 0x7) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) capset(&(0x7f00000000c0), &(0x7f0000000100)) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001240)='smaps\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4066, 0xfe2}], 0x1, 0xfffffff7, 0x0) syz_emit_vhci(0x0, 0x9) semctl$GETVAL(0x0, 0x0, 0xc, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000002b00)=ANY=[], 0x0) io_uring_setup(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 2.685290848s ago: executing program 4 (id=3868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}], {0x14}}, 0x3c}}, 0x0) 2.619461843s ago: executing program 4 (id=3869): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000021c0)=@newtaction={0x18e8, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc, 0x7, {0xc3bfefd1f2dd1218}}, {0xc, 0x4}}}]}, {0x620, 0x1, [@m_simple={0x164, 0x1c, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x0, 0x3, 0x5, 0x7fff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x7ff, 0x7, 0x3, 0x7}}, @TCA_DEF_DATA={0x11, 0x3, '+-#\\}^/\x1d$%@.\x00'}, @TCA_DEF_DATA={0xe, 0x3, '/dev/uhid\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7fff, 0x2, 0x3, 0x1, 0x3}}]}, {0xc4, 0x6, "a1c96462a3efb018e27f87942a48d2c14b69c4c3778306cc26f074ac5d7bcae694a43871d5f4447da12aebd33d8b5814fa94cd5b53ac8d7e6d56b7f6c40c2fb396c7bb45484ac886f3ab1be895bd277c9a5b9a7b1b2f0f9e79623c219235622ece4d0e245e216d161260f85e2da7e3a4e05408a35000eb626733212aba681e9083e7dd38e336711b9335abd974b2edbae3c8e30681c752b72563ef8584d4a78b722e602c00846352287893a7b6ef0844c269559c8f5eb23551c8a473075623cc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x16c, 0x15, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x17af, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xcf0, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x50, 0xbff, 0x20000000, 0x40c, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x101}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x5, 0x3, 0x4, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2334, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x9, 0x3, 0x2, 0x406bd}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1, 0x10000000, 0x100, 0x400}}]}, {0xaf, 0x6, "dcfd604117fe5537b4d230471b9a791a42f8fe291eea39d2713cd8b561ff0a981753f84f9c9c020d0e4772fb377778608fd8f2b2127eb38fe50894aa028f47871db09034eeab8beaadafab5f11eeb33abfa6d6f5fd55bf87b8f8a24aa66b57a74d2a837193f51b32bea06b5f551e072a8081c57e19b7e2020a5661dbf8c5dad989819e8df5069c49b6e9a4c16b62161cd946e0f1b051e05bd995ab2fb10906d55050aefb7064aa4b027f5d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0xfc, 0xa, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x63, 0x3, 0x4, 0xc355, 0x5}, 0x8cf}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x10000000, 0x10000, 0x9}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8231, 0x7, 0xffffffffffffffff, 0x1, 0x1}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf, 0x10000000, 0x10000000, 0x8, 0x5}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x7, 0x1, 0x0, 0xd216}, 0x7}}]}, {0x3d, 0x6, "5d9e48b1c1faf0296fa2e87772590cba58ed4a52d5fa624ff8bdb2028e9a1695f7929bbd8fab0f276a8bd1d3e832c7c3995b4fca9a96c96e56"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x128, 0xf, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x5, 0x2, 0x459}, @multicast1, @rand_addr=0x64010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x8, 0x3, 0x4, 0x8000}, @local, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x81, 0x7, 0x1, 0x80}, @broadcast, @private=0xa010100, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x1000, 0x7, 0x6, 0x200000}, @rand_addr=0x64010101, @loopback, 0xffffff00}}]}, {0x5d, 0x6, "f0760e5bd26b253f2d39042d07d587bc8cf33225b07829117b887ac036da335c14d8cd945e0bfd6d1d6350c09a0b36187efce653aaa135358c4c7858634a7f1f27758fb9dfb557da66c02d33f67839b5226fb05a6c0fc05093"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbedit={0x128, 0xe, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7600}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfff8}]}, {0xcc, 0x6, "948b3c541ddbea27fd5f4c313824025c9bcdb549cafc8610356786625d09ad345e23fb71d2ecb15600b6350f5b93e4b203616f2d33f1969110de1b4deb1f88782abdfaa9d0c31478626bcf5c5c2e899a1f77eaed2bc5ad63867341e048662125e03117a8768d87b121f40b1041a2784d366bdd10cdf85e47d3f3a8127d8f243955d39dfd763097dc44360b66d91a35bd6d21559c4502e98d2bb905c9606b7de5090ca937a9571901bb4904febe51d351f9933d4f1127ded857020b394ca5954012109bafb2267a30"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x1258, 0x1, [@m_gact={0xc4, 0x8, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1fa7, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x20de, 0x4}}]}, {0x7f, 0x6, "d45e0f1bb5f48651a5ff5ba6a9a9f8327423792a8eaa304dfc1d80677ba20f322e7bdea377c3b590750923727950f8ef89f3ae061b47803caeb0c756f100935c4a351e5b43c22e56d73188414a95f21fe4724c2d9b3cd505700efcd03dbb5e661914ccd3c6bbc37dcd2b2aa4f3bd7459b2cada771ff35be2a66729"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x4c, 0x10, 0x0, 0x0, {{0x8}, {0x4}, {0x22, 0x6, "f6c8bfc99043183f8d7adc723ceebb338e8c86ed5fb00bb984d24824e093"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0xc4, 0x12, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3, 0x5ae06c07f4ba306, 0x7, 0x800}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}]}, {0x68, 0x6, "a4ce4134a27ca811535d0d0e32628040afa451310faa960c1f6648eb24860d465786a87b7ea6c59683e17a9134d02c615007acad9f69cc3ddb96975755f8a8ca2eeaa7a4d5c394cc3b28bdc6689688b5a36bc7223123a2e9e8e689895831933f8ccf73cb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x1080, 0x1c, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xfff, 0x8, 0x7, 0xf2}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffffe, 0x0, 0x2, 0x3, 0xfffffff9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x25e}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xef7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x18e8}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x4, 0x0, 0x5]}) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000ffccb3fb009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000640)={0x13, 0x0, 0x7, {0x0, r8, 0x2}}, 0x18) socketpair(0x1, 0x6, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x5450, 0x0) memfd_create(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.823918369s ago: executing program 2 (id=3870): openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$BPF_LINK_UPDATE(0x21, &(0x7f0000000080), 0x10) 1.637672435s ago: executing program 2 (id=3871): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/13, @ANYRES32, @ANYBLOB="0000000000000000b708000000", @ANYRES64, @ANYRES8=r1, @ANYRES8, @ANYRESOCT=r1, @ANYBLOB="f4f199a74448b2984e9bbd470e94727d4fd69a26f3882dc20a35463089e0ad64a05d4230a96750f35580691623f687f351990b2bb42412184d451efb8aff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000040)=0x20000006, 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) 1.469940318s ago: executing program 0 (id=3872): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b87030b0000001f00000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.282934774s ago: executing program 3 (id=3873): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$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") openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x101480, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.225728278s ago: executing program 0 (id=3874): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000003e0095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 1.225038848s ago: executing program 4 (id=3875): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x400, 0x10000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, &(0x7f0000000740)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x8000000000000001}}]}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x695, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, 0x0, 0x4a}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket(0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200000000000000", @ANYRES32=0x0, @ANYBLOB="bf"], 0x1c}}, 0x0) 278.285537ms ago: executing program 4 (id=3876): socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r1, 0xc8036ab6d6cbef07}, 0x14}}, 0x0) 89.171473ms ago: executing program 0 (id=3877): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1], 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYRES16=r0], 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000540)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) getpgrp(r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8d}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f0000001300)=0x80000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='l%\x86\xce6\xdb\f\xcf\x19|\xc9O\x7f\xce\x8f\x7f\x1c\xeay\x06\x00\x00\x00\a0\r\x13\xaa\x84r\xd7^\xe82\x0f\x1a\xf1\x02\x00\x1e&{\xee2\x95I\xca\xbevl\x12\xb6 \xd4') prctl$PR_SET_SECCOMP(0x10, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x2b, @ipv4={'\x00', '\xff\xff', @remote}, 0x400}, 0x1c) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='ns\x00') getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0x0, 0xee01, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x2, 0x2b0, 0xffffffff, 0x0, 0x1c8, 0xc0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'veth1_to_team\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@local, @private, 0x0, 0x0, 'team0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "90617ae6e2ad43980c3bec242f9040a700efba1f7ef6f77096db813f042b"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 0s ago: executing program 4 (id=3878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="6eab6883cb97ca6d0581a6215c12c30d4756f0460bb0e257650adc51acfbe726f2a785c8129c23f9970dfa9448f64d14de5ec7430702527a676d93bb807e9b6dbc04124cae66873d22bbd27331583225980b1dcc6545a01e52d4c59d9b8d544069d6506d5679c593aae89ca83ba770527ea1215ff0b0f44af70933b9289186bf7851c94822503089f1cbcdca8ba1792bfb8c4fbbe59fb38c863aba42c6de347ecec20b8260ce59ac825b070464a90d8662ed99328bbd54f1fd2241a4fe7ccaed1bdf1edc6671f45757c144110ae359c9509321b0aa4d8489b340914b655495b17ee2", @ANYRESOCT, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x38, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}]}]}, 0x38}}, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='statm\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0x10d}], 0x1, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) kernel console output (not intermixed with test programs): 0.435373][T13672] loop3: detected capacity change from 0 to 256 [ 720.443043][T13670] loop1: detected capacity change from 0 to 1024 [ 720.513172][T13670] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 720.657108][ T26] audit: type=1800 audit(1721830095.082:151): pid=13670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2982" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 720.968226][T13285] EXT4-fs (loop1): unmounting filesystem. [ 721.456316][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2993'. [ 721.493641][ T3591] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 721.743536][ T3591] usb 5-1: Using ep0 maxpacket: 8 [ 721.865002][ T3591] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.907391][T13715] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 721.915632][ T26] audit: type=1326 audit(1721830096.342:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13704 comm="syz.1.2996" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae1af75f19 code=0x0 [ 721.975615][ T3591] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 721.994900][ T3591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 722.009638][ T3591] usb 5-1: SerialNumber: syz [ 722.014682][T13715] loop2: detected capacity change from 0 to 1024 [ 722.034973][ T3591] usb 5-1: config 0 descriptor?? [ 722.075498][T13715] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 722.095822][ T3591] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 722.115518][ T3591] usb 5-1: No valid video chain found. [ 722.127761][ T26] audit: type=1800 audit(1721830096.542:153): pid=13715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3000" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 722.165508][T13298] EXT4-fs (loop2): unmounting filesystem. [ 722.333640][ T152] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 722.337363][T13733] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3008'. [ 722.579977][T13714] can: request_module (can-proto-5) failed. [ 722.610867][T13661] usb 5-1: USB disconnect, device number 65 [ 722.611551][T13714] loop1: detected capacity change from 0 to 512 [ 722.637181][T13714] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 722.703522][ T152] usb 1-1: device descriptor read/64, error -71 [ 722.712081][ T5867] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 722.743982][ T7127] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 722.973458][ T152] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 723.028133][T13756] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 723.042588][T13756] loop1: detected capacity change from 0 to 1024 [ 723.070386][T13756] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 723.082565][ T26] audit: type=1800 audit(1721830097.512:154): pid=13756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3016" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 723.119105][T13285] EXT4-fs (loop1): unmounting filesystem. [ 723.173396][ T152] usb 1-1: device descriptor read/64, error -71 [ 723.173707][ T7127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.211922][ T7127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.229989][ T7127] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 723.241265][ T7127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.273816][ T7127] usb 3-1: config 0 descriptor?? [ 723.293537][ T152] usb usb1-port1: attempt power cycle [ 723.645070][ T26] audit: type=1326 audit(1721830098.072:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.3.3023" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9f9575f19 code=0x0 [ 723.702202][T13786] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 723.705367][ T152] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 723.720683][T13786] loop1: detected capacity change from 0 to 1024 [ 723.768201][T13786] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 723.798143][ T26] audit: type=1800 audit(1721830098.222:156): pid=13786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3027" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 723.820131][ T152] usb 1-1: device descriptor read/8, error -71 [ 723.845466][ T7127] usbhid 3-1:0.0: can't add hid device: -71 [ 723.851486][ T7127] usbhid: probe of 3-1:0.0 failed with error -71 [ 723.860525][T13285] EXT4-fs (loop1): unmounting filesystem. [ 723.862468][ T7127] usb 3-1: USB disconnect, device number 56 [ 724.053611][ T3642] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 724.093726][ T152] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 724.197262][ T152] usb 1-1: device descriptor read/8, error -71 [ 724.293423][ T3642] usb 5-1: Using ep0 maxpacket: 8 [ 724.320845][T13809] loop3: detected capacity change from 0 to 512 [ 724.330097][ T152] usb usb1-port1: unable to enumerate USB device [ 724.355019][T13784] can: request_module (can-proto-5) failed. [ 724.362282][T13809] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 724.413870][ T3642] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.503706][ T3642] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 724.513181][ T3642] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 724.525598][ T7127] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 724.533749][ T3642] usb 5-1: SerialNumber: syz [ 724.551377][ T3642] usb 5-1: config 0 descriptor?? [ 724.603637][T13818] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 724.620148][ T3642] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 724.630434][ T3642] usb 5-1: No valid video chain found. [ 724.647792][T13818] loop3: detected capacity change from 0 to 1024 [ 724.697638][T13818] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 724.713044][ T26] audit: type=1800 audit(1721830099.132:157): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3039" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 724.756027][T10971] EXT4-fs (loop3): unmounting filesystem. [ 724.942471][ T7127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.970620][ T7127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.981142][ T7127] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 724.997242][ T7127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.012841][ T7127] usb 2-1: config 0 descriptor?? [ 725.855390][ T3642] usb 5-1: USB disconnect, device number 66 [ 726.175925][T13661] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 727.047237][T13661] usb 3-1: New USB device found, idVendor=0698, idProduct=2003, bcdDevice=25.06 [ 727.060676][T13661] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.069340][T13661] usb 3-1: Product: syz [ 727.074261][T13661] usb 3-1: Manufacturer: syz [ 727.078943][T13661] usb 3-1: SerialNumber: syz [ 727.093829][T13661] usb 3-1: config 0 descriptor?? [ 727.135365][T13661] gspca_main: gspca_zc3xx-2.14.0 probing 0698:2003 [ 727.263592][ T7127] hid-led: probe of 0003:27B8:01ED.0018 failed with error -71 [ 727.283971][ T7127] usb 2-1: USB disconnect, device number 49 [ 727.292178][T13855] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 727.339605][T13855] loop3: detected capacity change from 0 to 1024 [ 727.451596][T13855] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 727.505320][ T26] audit: type=1800 audit(1721830101.932:158): pid=13855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3050" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 727.537317][T13837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.573218][T13837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.615736][T10971] EXT4-fs (loop3): unmounting filesystem. [ 727.673549][T13661] gspca_zc3xx: reg_w_i err -110 [ 728.185128][ T7119] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 728.346139][T13661] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 728.373433][ T7119] usb 4-1: device descriptor read/64, error -71 [ 728.986540][T13661] gspca_zc3xx: probe of 3-1:0.0 failed with error -110 [ 729.062487][T13661] usb 3-1: USB disconnect, device number 57 [ 729.262458][T13892] netlink: 'syz.0.3063': attribute type 39 has an invalid length. [ 729.273735][ T7119] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 729.276363][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 729.285374][T13892] device veth0_macvtap left promiscuous mode [ 729.487336][ T7119] usb 4-1: device descriptor read/64, error -71 [ 729.493766][T13661] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 729.614842][ T7119] usb usb4-port1: attempt power cycle [ 729.633605][T13900] 9pnet_virtio: no channels available for device 127.0.0.1 [ 729.747819][T13661] usb 3-1: Using ep0 maxpacket: 8 [ 729.752225][T13906] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3068'. [ 730.053532][T13661] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.756717][ T3642] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 730.762577][ T7119] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 730.833418][ T7119] usb 4-1: device descriptor read/8, error -71 [ 730.863995][T13661] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 730.881545][T13661] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 730.900052][T13661] usb 3-1: SerialNumber: syz [ 730.914687][T13661] usb 3-1: config 0 descriptor?? [ 730.972274][T13661] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 731.003422][T13661] usb 3-1: No valid video chain found. [ 731.043495][ T3642] usb 5-1: Using ep0 maxpacket: 8 [ 731.163646][ T3642] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 731.190174][ T3642] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 731.225534][ T3642] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 731.253414][ T3642] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 731.284360][ T3642] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 731.381516][T13661] usb 3-1: USB disconnect, device number 58 [ 731.465232][ T3642] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 731.479020][T13943] loop3: detected capacity change from 0 to 1024 [ 731.493379][ T3642] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.501988][ T3642] usb 5-1: Product: syz [ 731.526682][ T3642] usb 5-1: Manufacturer: syz [ 731.534713][ T3642] usb 5-1: SerialNumber: syz [ 731.561898][ T3642] usb 5-1: config 0 descriptor?? [ 731.578508][T13943] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 731.597879][ T26] audit: type=1800 audit(1721830106.022:159): pid=13943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3082" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 731.635249][ T3642] redrat3 5-1:0.0: Couldn't find all endpoints [ 732.335554][T10971] EXT4-fs (loop3): unmounting filesystem. [ 732.392741][ T3642] usb 5-1: USB disconnect, device number 67 [ 732.474812][T13952] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3084'. [ 732.786718][T13972] loop0: detected capacity change from 0 to 1024 [ 732.830721][T13972] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 732.844186][ T26] audit: type=1800 audit(1721830107.272:160): pid=13972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3093" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 732.873527][ T3642] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 732.898890][ T9389] EXT4-fs (loop0): unmounting filesystem. [ 733.073595][ T3642] usb 4-1: device descriptor read/64, error -71 [ 733.077294][T13991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3099'. [ 733.203537][ T7127] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 733.283605][ T7119] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 733.353428][ T3642] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 733.443417][T13661] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 733.463621][ T7127] usb 3-1: Using ep0 maxpacket: 8 [ 733.543400][ T3642] usb 4-1: device descriptor read/64, error -71 [ 733.613556][ T7127] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.666492][ T3642] usb usb4-port1: attempt power cycle [ 733.685808][ T7119] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 733.696153][T13661] usb 1-1: Using ep0 maxpacket: 8 [ 733.701575][ T7119] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 733.710840][ T7127] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 733.720514][ T7127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 733.729593][ T7127] usb 3-1: SerialNumber: syz [ 733.737719][ T7127] usb 3-1: config 0 descriptor?? [ 733.785389][ T7127] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 733.792302][ T7127] usb 3-1: No valid video chain found. [ 733.803537][ T7119] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 733.812582][ T7119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 733.820663][ T7119] usb 2-1: SerialNumber: syz [ 733.843534][T13661] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 733.853463][T13661] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 733.863119][T13661] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 733.876568][T13661] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 733.886464][T13661] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 734.073790][T13661] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 734.083456][ T3642] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 734.093110][T13661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.104672][ T7119] usb 2-1: 0:2 : does not exist [ 734.121382][T13661] usb 1-1: Product: syz [ 734.125683][T13661] usb 1-1: Manufacturer: syz [ 734.133147][T13661] usb 1-1: SerialNumber: syz [ 734.148398][T13661] usb 1-1: config 0 descriptor?? [ 734.173507][ T3642] usb 4-1: device descriptor read/8, error -71 [ 734.196932][ T152] usb 3-1: USB disconnect, device number 59 [ 734.204955][T13661] redrat3 1-1:0.0: Couldn't find all endpoints [ 734.249504][T14019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3111'. [ 734.290434][T14021] loop4: detected capacity change from 0 to 512 [ 734.311545][T14021] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 734.320649][T14021] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038 (0x7fffffff) [ 734.356898][T13203] EXT4-fs (loop4): unmounting filesystem. [ 734.420244][ T7119] usb 1-1: USB disconnect, device number 46 [ 734.443984][ T3642] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 734.507301][ T3591] usb 2-1: USB disconnect, device number 50 [ 734.534014][ T3642] usb 4-1: device descriptor read/8, error -71 [ 734.653620][ T3642] usb usb4-port1: unable to enumerate USB device [ 735.830685][T14053] loop1: detected capacity change from 0 to 512 [ 736.005752][T14053] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 736.033632][T14053] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038 (0x7fffffff) [ 736.258581][T13285] EXT4-fs (loop1): unmounting filesystem. [ 736.565012][T14072] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3131'. [ 737.180225][T14080] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 738.183435][ T152] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 738.283143][T14107] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3142'. [ 738.483861][ T7122] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 738.754316][ T7122] usb 5-1: Using ep0 maxpacket: 16 [ 739.093427][ T152] usb 1-1: device descriptor read/64, error -71 [ 739.103775][ T7122] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 739.114818][ T7122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.115634][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 739.123049][ T7122] usb 5-1: Product: syz [ 739.139787][ T7122] usb 5-1: Manufacturer: syz [ 739.144768][ T7122] usb 5-1: SerialNumber: syz [ 739.152016][ T7122] usb 5-1: config 0 descriptor?? [ 739.194448][ T7122] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 739.221561][ T26] audit: type=1326 audit(1721830113.642:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14117 comm="syz.1.3149" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae1af75f19 code=0x0 [ 739.363393][ T152] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 739.413575][ T7122] gspca_sn9c2028: read1 error -32 [ 739.553488][ T152] usb 1-1: device descriptor read/64, error -71 [ 739.672881][ T7122] gspca_sn9c2028: read1 error -71 [ 739.673601][ T152] usb usb1-port1: attempt power cycle [ 739.678618][ T7122] sn9c2028: probe of 5-1:0.0 failed with error -71 [ 739.700125][ T7122] usb 5-1: USB disconnect, device number 68 [ 739.896856][T14134] loop1: detected capacity change from 0 to 512 [ 739.915169][T14134] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 740.135638][T14125] can: request_module (can-proto-5) failed. [ 740.659012][ T152] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 740.899565][T14148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3160'. [ 740.913591][ T152] usb 1-1: device not accepting address 49, error -71 [ 740.999444][T14156] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3158'. [ 742.129613][T14159] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3162'. [ 743.763380][ T26] audit: type=1326 audit(1721830118.162:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14172 comm="syz.1.3167" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae1af75f19 code=0x0 [ 743.815383][T14193] loop2: detected capacity change from 0 to 512 [ 744.067432][T14205] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3175'. [ 744.109651][T14193] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 744.141093][T14193] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038 (0x7fffffff) [ 744.771774][T13298] EXT4-fs (loop2): unmounting filesystem. [ 744.780793][T14207] loop1: detected capacity change from 0 to 512 [ 744.809201][T14207] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 744.816562][T14209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3178'. [ 744.828711][T14191] can: request_module (can-proto-5) failed. [ 744.927832][T14215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3180'. [ 746.069984][T14236] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3188'. [ 746.350637][T14250] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3189'. [ 747.933841][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.940165][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.021147][T14242] loop2: detected capacity change from 0 to 2048 [ 748.409743][T14271] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3201'. [ 750.196580][T14285] tty tty26: ldisc open failed (-12), clearing slot 25 [ 751.690388][T14311] loop3: detected capacity change from 0 to 128 [ 751.903435][ T3194] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 752.273571][ T3194] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.309221][ T3194] usb 5-1: config 0 has no interfaces? [ 752.322050][ T3194] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 752.359330][ T3194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.373572][ T3642] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 752.406637][ T3194] usb 5-1: config 0 descriptor?? [ 752.573402][ T3642] usb 1-1: device descriptor read/64, error -71 [ 752.619803][T14323] device veth1_macvtap left promiscuous mode [ 752.667815][ T3194] usb 5-1: USB disconnect, device number 69 [ 752.781102][T14327] device pim6reg1 entered promiscuous mode [ 752.853578][ T3642] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 753.043440][ T3642] usb 1-1: device descriptor read/64, error -71 [ 753.118205][T14337] tipc: Started in network mode [ 753.127116][T14337] tipc: Node identity fa1f3e440d8e, cluster identity 4711 [ 753.140083][T14337] tipc: Enabled bearer , priority 0 [ 753.163739][ T3642] usb usb1-port1: attempt power cycle [ 753.189294][T14336] tipc: Disabling bearer [ 753.410074][T14350] loop4: detected capacity change from 0 to 1024 [ 753.470346][T14350] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 753.502705][ T26] audit: type=1800 audit(1721830127.922:163): pid=14350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3229" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 753.560612][T13203] EXT4-fs (loop4): unmounting filesystem. [ 753.593534][ T3642] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 753.703678][ T3642] usb 1-1: device descriptor read/8, error -71 [ 753.762586][T14355] kvm [14354]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 753.836384][T14355] kvm [14354]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 753.950621][T14355] kvm [14354]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 753.983478][ T3642] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 754.012112][T14355] kvm [14354]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 754.084924][T14355] kvm [14354]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 754.093603][ T3642] usb 1-1: device descriptor read/8, error -71 [ 754.223601][ T3642] usb usb1-port1: unable to enumerate USB device [ 754.413519][ T3593] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 754.696822][T14375] loop3: detected capacity change from 0 to 128 [ 754.783572][ T3593] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.803337][ T3593] usb 5-1: config 0 has no interfaces? [ 754.819106][ T3593] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 754.828637][ T3593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.849612][ T3593] usb 5-1: config 0 descriptor?? [ 754.919969][ T7129] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 755.107302][ T3593] usb 5-1: USB disconnect, device number 70 [ 755.283882][ T7129] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 755.303610][ T7129] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 755.322182][T14385] tipc: Started in network mode [ 755.329986][T14385] tipc: Node identity 36613473f9fa, cluster identity 4711 [ 755.352597][T14385] tipc: Enabled bearer , priority 0 [ 755.372293][T14384] tipc: Disabling bearer [ 755.403794][ T7129] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 755.413653][ T7129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 755.421653][ T7129] usb 3-1: SerialNumber: syz [ 755.703810][ T7129] usb 3-1: 0:2 : does not exist [ 755.703931][T14391] loop4: detected capacity change from 0 to 1024 [ 755.812797][T14391] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 755.862518][ T26] audit: type=1800 audit(1721830130.282:164): pid=14391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3244" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 755.925845][T13203] EXT4-fs (loop4): unmounting filesystem. [ 756.169928][ T3591] usb 3-1: USB disconnect, device number 60 [ 756.286309][T14403] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3247'. [ 757.137384][ T3557] Bluetooth: hci4: unexpected event for opcode 0x0c1c [ 757.253478][ T7129] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 757.302796][T14428] loop0: detected capacity change from 0 to 2048 [ 757.408326][T14428] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 757.445760][ T3194] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 757.584654][ T7129] usb 3-1: device descriptor read/64, error -71 [ 758.313561][ T3591] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 758.388384][ T7129] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 758.511192][T14443] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3262'. [ 758.683413][ T7129] usb 3-1: device descriptor read/64, error -71 [ 759.194393][ T7129] usb usb3-port1: attempt power cycle [ 759.203770][ T3194] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.228656][ T3194] usb 4-1: config 0 has no interfaces? [ 759.243686][ T3194] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 759.252812][ T3194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.277122][ T3194] usb 4-1: config 0 descriptor?? [ 759.423544][ T3591] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.442822][ T3591] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 759.537005][ T3194] usb 4-1: USB disconnect, device number 58 [ 759.563484][ T3591] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 759.572537][ T3591] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 759.617562][ T3591] usb 2-1: SerialNumber: syz [ 759.663463][ T7129] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 759.763572][ T7129] usb 3-1: device descriptor read/8, error -71 [ 759.885699][ T3591] usb 2-1: 0:2 : does not exist [ 759.937145][ T102] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 759.954878][ T102] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 346 with error 28 [ 759.968168][ T102] EXT4-fs (loop0): This should not happen!! Data will be lost [ 759.968168][ T102] [ 759.978709][ T102] EXT4-fs (loop0): Total free blocks count 0 [ 759.985191][ T102] EXT4-fs (loop0): Free/Dirty block details [ 760.001429][ T102] EXT4-fs (loop0): free_blocks=2415919104 [ 760.007582][ T102] EXT4-fs (loop0): dirty_blocks=352 [ 760.015653][ T102] EXT4-fs (loop0): Block reservation details [ 760.021716][ T102] EXT4-fs (loop0): i_reserved_data_blocks=22 [ 760.039628][ T9389] EXT4-fs (loop0): unmounting filesystem. [ 760.046040][ T7129] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 760.298805][ T3591] usb 2-1: USB disconnect, device number 51 [ 760.313626][ T7129] usb 3-1: device not accepting address 64, error -71 [ 760.324495][ T7129] usb usb3-port1: unable to enumerate USB device [ 760.472011][T14456] kvm [14455]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 760.532096][T14456] kvm [14455]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 760.585714][T14456] kvm [14455]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 760.619568][T14456] kvm [14455]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 760.662547][T14456] kvm [14455]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 761.911807][T14497] loop2: detected capacity change from 0 to 128 [ 762.013373][ T26] audit: type=1804 audit(1721830136.392:165): pid=14497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3285" name="/newroot/61/file0/bus" dev="loop2" ino=1048657 res=1 errno=0 [ 762.045547][T14501] loop4: detected capacity change from 0 to 128 [ 762.080663][ T3194] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 762.092749][T14499] trusted_key: encrypted_key: insufficient parameters specified [ 762.430889][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 762.432349][T14512] loop2: detected capacity change from 0 to 512 [ 762.473639][ T3194] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.490218][ T3194] usb 2-1: config 0 has no interfaces? [ 762.499819][ T3194] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 762.502692][T14512] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 762.520683][T14512] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038 (0x7fffffff) [ 762.555503][ T3194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.575527][ T3194] usb 2-1: config 0 descriptor?? [ 762.577242][T13298] EXT4-fs (loop2): unmounting filesystem. [ 762.813378][T14525] loop2: detected capacity change from 0 to 1024 [ 762.822905][ T3194] usb 2-1: USB disconnect, device number 52 [ 762.829748][T14525] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3294'. [ 763.777550][T14538] trusted_key: encrypted_key: insufficient parameters specified [ 763.867462][T14546] loop1: detected capacity change from 0 to 512 [ 763.969737][T14546] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 763.987939][T14546] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038 (0x7fffffff) [ 764.088590][T13285] EXT4-fs (loop1): unmounting filesystem. [ 764.171402][T14559] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3308'. [ 764.313755][ T7127] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 764.733958][ T7127] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.771360][ T7127] usb 1-1: config 0 has no interfaces? [ 764.798807][ T7127] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 764.908870][T14577] trusted_key: encrypted_key: insufficient parameters specified [ 764.961471][ T7127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.029905][ T7127] usb 1-1: config 0 descriptor?? [ 766.626832][T14597] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3323'. [ 767.073130][ T7127] usb 1-1: USB disconnect, device number 55 [ 767.167493][ T7119] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 767.533779][ T7119] usb 4-1: Using ep0 maxpacket: 16 [ 767.901115][ T7119] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 767.910961][ T7119] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 767.921261][ T7119] usb 4-1: config 1 has no interface number 1 [ 767.928505][ T7119] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 768.103669][ T7119] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 768.123378][ T7119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.131677][ T7119] usb 4-1: Product: syz [ 768.148066][ T7119] usb 4-1: Manufacturer: syz [ 768.157461][ T7119] usb 4-1: SerialNumber: syz [ 768.200094][T14632] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3336'. [ 768.319524][T14640] loop2: detected capacity change from 0 to 512 [ 768.348033][T14640] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 768.357455][T14640] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038 (0x7fffffff) [ 768.395813][T13298] EXT4-fs (loop2): unmounting filesystem. [ 768.478867][ T3194] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 768.493787][ T7119] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 768.511233][ T7119] usb 4-1: 2:1 : sample bitwidth 127 in over sample bytes 0 [ 768.521304][ T7119] usb 4-1: 2:1 : unsupported sample bitwidth 127 in 0 bytes [ 768.573554][ T7119] usb 4-1: USB disconnect, device number 59 [ 768.723399][ T3194] usb 5-1: Using ep0 maxpacket: 16 [ 768.957771][T13661] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 769.613503][ T3194] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 769.705565][ T3194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.734743][T14659] trusted_key: encrypted_key: insufficient parameters specified [ 769.743013][ T3194] usb 5-1: Product: syz [ 769.762982][ T3194] usb 5-1: Manufacturer: syz [ 769.773120][ T3194] usb 5-1: SerialNumber: syz [ 769.838553][ T3194] usb 5-1: config 0 descriptor?? [ 769.885276][ T3194] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 769.953481][T13661] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.982630][T13661] usb 3-1: config 0 has no interfaces? [ 769.997560][T13661] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 770.035330][T13661] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.072619][T13661] usb 3-1: config 0 descriptor?? [ 770.093503][ T3194] gspca_sn9c2028: read1 error -32 [ 770.133541][ T3194] gspca_sn9c2028: read1 error -32 [ 770.174000][ T3194] gspca_sn9c2028: read1 error -71 [ 770.179351][ T3194] sn9c2028: probe of 5-1:0.0 failed with error -71 [ 770.224808][ T3194] usb 5-1: USB disconnect, device number 71 [ 770.419927][ T3593] usb 3-1: USB disconnect, device number 65 [ 771.353543][T13661] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 771.615112][T13661] usb 1-1: Using ep0 maxpacket: 8 [ 771.936997][T13661] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 772.100849][T13661] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 772.150246][T13661] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 772.259050][T13661] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 772.474168][T13661] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 772.553492][T13661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.592243][T13661] usb 1-1: Product: syz [ 772.599298][T13661] usb 1-1: Manufacturer: syz [ 772.613360][T13661] usb 1-1: SerialNumber: syz [ 772.631425][T13661] usb 1-1: config 0 descriptor?? [ 772.704978][T13661] redrat3 1-1:0.0: Couldn't find all endpoints [ 772.902049][T14701] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3360'. [ 772.907709][ T3593] usb 1-1: USB disconnect, device number 56 [ 773.353111][T14710] trusted_key: encrypted_key: insufficient parameters specified [ 774.062696][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 775.425241][T14742] loop0: detected capacity change from 0 to 128 [ 775.633488][ T3642] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 775.643507][ T7127] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 775.893425][ T3642] usb 4-1: Using ep0 maxpacket: 16 [ 776.003409][ T3194] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 776.013560][ T3642] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 776.026975][ T3642] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 776.039960][ T3642] usb 4-1: config 1 has no interface number 1 [ 776.046369][ T7127] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.046392][ T7127] usb 2-1: config 0 has no interfaces? [ 776.046419][ T7127] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 776.046442][ T7127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.079914][ T3642] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 776.082526][ T7127] usb 2-1: config 0 descriptor?? [ 776.253601][ T3642] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 776.262828][ T3642] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.273420][ T3194] usb 3-1: Using ep0 maxpacket: 8 [ 776.292900][ T3642] usb 4-1: Product: syz [ 776.297573][ T3642] usb 4-1: Manufacturer: syz [ 776.302478][ T3642] usb 4-1: SerialNumber: syz [ 776.398837][ T3194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 776.410259][ T3194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 776.450244][ T3194] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 776.476886][ T3194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 776.634073][ T3642] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 776.648860][ T3642] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 776.655274][ T3194] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 776.678038][ T3194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.698410][ T3642] usb 4-1: 2:1 : invalid channels 0 [ 776.710684][ T3194] usb 3-1: Product: syz [ 776.720653][ T3194] usb 3-1: Manufacturer: syz [ 776.725697][ T3194] usb 3-1: SerialNumber: syz [ 776.744632][ T3642] usb 4-1: USB disconnect, device number 60 [ 776.751576][ T3194] usb 3-1: config 0 descriptor?? [ 776.814878][ T3194] redrat3 3-1:0.0: Couldn't find all endpoints [ 777.019889][T13661] usb 3-1: USB disconnect, device number 66 [ 777.483497][ T7122] usb 2-1: USB disconnect, device number 53 [ 777.686618][T14771] loop2: detected capacity change from 0 to 512 [ 778.018307][T14772] trusted_key: encrypted_key: insufficient parameters specified [ 779.647632][T14771] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 779.663822][T14771] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038 (0x7fffffff) [ 779.698387][T14783] loop1: detected capacity change from 0 to 1024 [ 779.766747][T14783] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 779.860865][T13298] EXT4-fs (loop2): unmounting filesystem. [ 779.913224][T13285] EXT4-fs (loop1): unmounting filesystem. [ 779.943865][ T26] audit: type=1800 audit(1721830154.272:166): pid=14783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3387" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 780.731715][T14793] loop1: detected capacity change from 0 to 2048 [ 780.838397][T14793] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 780.997559][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 781.110662][ T3557] Bluetooth: hci4: unexpected event for opcode 0x0c1c [ 781.463880][ T7122] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 781.874868][ T7122] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.917542][ T7122] usb 4-1: config 0 has no interfaces? [ 781.923058][ T7122] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 782.039400][T14781] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 782.839725][ T7122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.970069][ T7122] usb 4-1: config 0 descriptor?? [ 783.885740][ T7815] tipc: Left network mode [ 784.065741][ T4931] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 222 with error 28 [ 784.106239][ T4931] EXT4-fs (loop1): This should not happen!! Data will be lost [ 784.106239][ T4931] [ 784.134411][ T4931] EXT4-fs (loop1): Total free blocks count 0 [ 784.162321][ T4931] EXT4-fs (loop1): Free/Dirty block details [ 784.176114][ T4931] EXT4-fs (loop1): free_blocks=2415919104 [ 784.201743][ T4931] EXT4-fs (loop1): dirty_blocks=224 [ 784.201839][T14826] loop2: detected capacity change from 0 to 1024 [ 784.228240][ T4931] EXT4-fs (loop1): Block reservation details [ 784.255876][ T4931] EXT4-fs (loop1): i_reserved_data_blocks=14 [ 784.271257][T14826] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 784.302663][T13285] EXT4-fs (loop1): unmounting filesystem. [ 784.386570][ T26] audit: type=1800 audit(1721830158.812:167): pid=14826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3399" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 784.574173][T13298] EXT4-fs (loop2): unmounting filesystem. [ 784.659500][T14831] loop1: detected capacity change from 0 to 512 [ 784.705659][T14831] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 784.724969][T14831] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038 (0x7fffffff) [ 784.904255][ T7129] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 784.935040][T13285] EXT4-fs (loop1): unmounting filesystem. [ 785.069398][ T3194] usb 4-1: USB disconnect, device number 61 [ 785.094814][ T7129] usb 3-1: device descriptor read/64, error -71 [ 785.279026][T14849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3408'. [ 785.376842][ T7815] device hsr_slave_0 left promiscuous mode [ 785.392965][ T7815] device hsr_slave_1 left promiscuous mode [ 785.399088][ T7129] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 785.452118][ T7815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.459626][ T7815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.467527][ T7815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.475014][ T7815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.488180][ T7815] device bridge_slave_1 left promiscuous mode [ 785.494484][ T7815] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.506330][ T7815] device bridge_slave_0 left promiscuous mode [ 785.514629][ T7815] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.593487][ T3642] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 785.602322][ T7815] device veth1_macvtap left promiscuous mode [ 785.608583][ T7815] device veth0_macvtap left promiscuous mode [ 785.615845][ T7815] device veth1_vlan left promiscuous mode [ 785.621841][ T7815] device veth0_vlan left promiscuous mode [ 785.637095][T14856] loop1: detected capacity change from 0 to 1024 [ 785.953829][ T3642] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 785.983998][ T3642] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 786.040799][T14856] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 786.064324][ T26] audit: type=1800 audit(1721830160.492:168): pid=14856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3411" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 786.085098][ T3642] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 786.094320][ T3642] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 786.101302][ T7129] usb 3-1: device descriptor read/64, error -71 [ 786.102357][ T3642] usb 1-1: SerialNumber: syz [ 786.116034][T13285] EXT4-fs (loop1): unmounting filesystem. [ 786.223529][ T7129] usb usb3-port1: attempt power cycle [ 786.237726][T14861] loop3: detected capacity change from 0 to 512 [ 786.303543][T14861] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 786.317560][T14861] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038 (0x7fffffff) [ 786.388988][T10971] EXT4-fs (loop3): unmounting filesystem. [ 786.431327][ T3642] usb 1-1: 0:2 : does not exist [ 786.477060][ T3557] Bluetooth: hci4: unexpected event for opcode 0x0c1c [ 786.648235][ T7129] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 786.769562][ T7129] usb 3-1: device descriptor read/8, error -71 [ 786.837056][ T7127] usb 1-1: USB disconnect, device number 57 [ 786.863480][ T7122] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 787.029711][ T7815] team0 (unregistering): Port device team_slave_1 removed [ 787.054590][ T7129] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 787.163783][ T7129] usb 3-1: device descriptor read/8, error -71 [ 787.210669][ T7815] team0 (unregistering): Port device team_slave_0 removed [ 787.274183][ T7122] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.288968][ T7815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.294738][ T7122] usb 4-1: config 0 has no interfaces? [ 787.303698][ T7129] usb usb3-port1: unable to enumerate USB device [ 787.328910][ T7122] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 787.348197][ T7122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.395186][ T7122] usb 4-1: config 0 descriptor?? [ 787.437370][ T7815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 788.898502][T14890] loop1: detected capacity change from 0 to 1024 [ 788.912049][ T7815] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 788.935386][ T7815] bond0 (unregistering): Released all slaves [ 789.000374][T14890] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 789.031854][ T26] audit: type=1800 audit(1721830163.452:169): pid=14890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3422" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 789.107740][T13285] EXT4-fs (loop1): unmounting filesystem. [ 789.273219][T14899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3424'. [ 789.531958][ T7127] usb 4-1: USB disconnect, device number 62 [ 789.703500][ T7129] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 789.753727][T13661] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 789.954033][T13661] usb 5-1: device descriptor read/64, error -71 [ 790.008611][ T3591] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 790.083691][ T7129] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 790.107273][ T7129] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 790.228937][ T7129] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 790.238099][T13661] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 790.253468][ T3591] usb 3-1: Using ep0 maxpacket: 16 [ 790.254093][ T7129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 790.289813][ T7129] usb 1-1: SerialNumber: syz [ 790.373659][ T3591] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 790.389152][ T3591] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 790.429895][ T3591] usb 3-1: config 1 has no interface number 1 [ 790.443386][T13661] usb 5-1: device descriptor read/64, error -71 [ 790.449155][ T3591] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 790.471202][ T3591] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 790.568754][ T7129] usb 1-1: 0:2 : does not exist [ 790.573977][T13661] usb usb5-port1: attempt power cycle [ 790.616816][T14932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3437'. [ 790.643640][ T3591] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 790.663391][ T3591] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.681614][ T3591] usb 3-1: Product: syz [ 790.691718][ T3591] usb 3-1: Manufacturer: syz [ 790.701827][ T3591] usb 3-1: SerialNumber: syz [ 790.899979][ T3557] Bluetooth: hci4: unexpected event for opcode 0x0c1c [ 790.978231][ T7129] usb 1-1: USB disconnect, device number 58 [ 791.003379][T13661] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 791.070357][ T3591] usb 3-1: USB disconnect, device number 71 [ 791.133608][T13661] usb 5-1: device descriptor read/8, error -71 [ 791.283462][ T7127] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 791.413364][T13661] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 791.513707][T13661] usb 5-1: device descriptor read/8, error -71 [ 791.643879][T13661] usb usb5-port1: unable to enumerate USB device [ 791.693607][ T7127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.728321][T14944] loop2: detected capacity change from 0 to 2048 [ 791.730862][ T7127] usb 4-1: config 0 has no interfaces? [ 791.776778][ T7127] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 791.823379][ T7127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.833492][T14944] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 791.834613][ T7127] usb 4-1: config 0 descriptor?? [ 793.388725][ T4931] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 793.427443][ T4931] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 486 with error 28 [ 793.459850][ T4931] EXT4-fs (loop2): This should not happen!! Data will be lost [ 793.459850][ T4931] [ 793.470602][ T4931] EXT4-fs (loop2): Total free blocks count 0 [ 793.478399][ T4931] EXT4-fs (loop2): Free/Dirty block details [ 793.484898][ T4931] EXT4-fs (loop2): free_blocks=2415919104 [ 793.490767][ T4931] EXT4-fs (loop2): dirty_blocks=496 [ 793.496723][ T4931] EXT4-fs (loop2): Block reservation details [ 793.503245][ T4931] EXT4-fs (loop2): i_reserved_data_blocks=31 [ 793.558017][T13298] EXT4-fs (loop2): unmounting filesystem. [ 793.681876][ T26] audit: type=1326 audit(1721830168.102:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.0.3449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1817f75f19 code=0x0 [ 793.707141][ T3923] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.719852][T13302] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 793.730833][T13302] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 793.740753][T13302] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 793.751259][T13302] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 793.759250][T13302] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 793.767598][T13302] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 794.502751][ T3923] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.570593][T14981] loop0: detected capacity change from 0 to 512 [ 794.629130][T14981] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 794.651761][ T3624] usb 4-1: USB disconnect, device number 63 [ 794.690588][T14976] can: request_module (can-proto-5) failed. [ 794.754162][ T3923] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.843907][ T3923] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.994964][T14998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3458'. [ 795.279081][T14972] chnl_net:caif_netlink_parms(): no params data found [ 795.439816][T15005] loop2: detected capacity change from 0 to 2048 [ 795.757066][T15005] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 795.784437][T13302] Bluetooth: hci1: command tx timeout [ 796.163712][T14972] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.170863][T14972] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.205428][T14972] device bridge_slave_0 entered promiscuous mode [ 796.271901][T14972] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.282487][T14972] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.324423][T14972] device bridge_slave_1 entered promiscuous mode [ 796.527339][T14972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.562523][T14972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.778965][T14972] team0: Port device team_slave_0 added [ 796.864227][T14972] team0: Port device team_slave_1 added [ 796.980166][T14972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.005049][T14972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.059238][T14972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.283970][T14972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.293390][T14972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.447495][T14972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.863621][T13302] Bluetooth: hci1: command tx timeout [ 798.425236][T14952] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 798.489207][T14972] device hsr_slave_0 entered promiscuous mode [ 798.496306][T14972] device hsr_slave_1 entered promiscuous mode [ 798.594122][ T3923] device hsr_slave_0 left promiscuous mode [ 798.600688][ T3923] device hsr_slave_1 left promiscuous mode [ 798.635732][ T3923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 798.643257][ T3923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.654217][ T3923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 798.661648][ T3923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.748048][ T3923] device bridge_slave_1 left promiscuous mode [ 798.812621][ T3923] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.863841][ T3923] device bridge_slave_0 left promiscuous mode [ 798.870675][ T3680] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 202 with error 28 [ 798.904672][ T3923] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.950404][ T3680] EXT4-fs (loop2): This should not happen!! Data will be lost [ 798.950404][ T3680] [ 799.007155][ T3680] EXT4-fs (loop2): Total free blocks count 0 [ 799.043410][ T3680] EXT4-fs (loop2): Free/Dirty block details [ 799.049354][ T3680] EXT4-fs (loop2): free_blocks=2415919104 [ 799.069095][ T3680] EXT4-fs (loop2): dirty_blocks=208 [ 799.083362][ T3923] device veth1_macvtap left promiscuous mode [ 799.089479][ T3923] device veth0_macvtap left promiscuous mode [ 799.097077][ T3923] device veth1_vlan left promiscuous mode [ 799.102909][ T3923] device veth0_vlan left promiscuous mode [ 799.109350][ T3680] EXT4-fs (loop2): Block reservation details [ 799.116208][ T3680] EXT4-fs (loop2): i_reserved_data_blocks=13 [ 799.130160][T13298] EXT4-fs (loop2): unmounting filesystem. [ 799.400478][ T26] audit: type=1326 audit(1721830173.822:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15031 comm="syz.3.3466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9f9575f19 code=0x0 [ 799.588001][T15045] loop0: detected capacity change from 0 to 4096 [ 799.628351][T15045] NILFS (loop0): invalid segment: Checksum error in segment payload [ 799.664210][T15045] NILFS (loop0): trying rollback from an earlier position [ 799.728780][T15045] NILFS (loop0): recovery complete [ 799.741121][T15046] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 799.890056][T15045] overlayfs: upper fs does not support tmpfile. [ 799.914934][T15045] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 799.940734][T15045] overlayfs: failed to set xattr on upper [ 799.953424][T13302] Bluetooth: hci1: command tx timeout [ 799.991729][T15045] overlayfs: ...falling back to index=off,metacopy=off. [ 800.035839][T15049] loop3: detected capacity change from 0 to 512 [ 800.054151][T15049] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 800.062896][T15043] can: request_module (can-proto-5) failed. [ 801.153986][ T3923] team0 (unregistering): Port device team_slave_1 removed [ 801.286718][ T3923] team0 (unregistering): Port device team_slave_0 removed [ 801.413892][ T3923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.511238][ T3923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.023492][T13302] Bluetooth: hci1: command tx timeout [ 803.000429][T15068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3474'. [ 803.252560][ T3923] bond0 (unregistering): Released all slaves [ 804.395190][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 804.564288][T15091] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3483'. [ 804.620269][T15091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3483'. [ 805.445527][T15097] loop1: detected capacity change from 0 to 1024 [ 805.548846][T14972] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 805.686518][T14972] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 805.757281][T14972] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 805.776392][T14972] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 806.682470][T14972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.724338][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 806.738065][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 806.769412][T14972] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.786623][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 806.797269][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 806.821488][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.828627][ T3624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.881057][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 806.889975][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 806.906648][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 806.921331][T15116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3490'. [ 806.933345][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.940444][ T3624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.955218][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 806.997658][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 807.030484][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 807.055921][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 807.090471][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 807.110533][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 807.134402][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 807.151012][T15119] loop1: detected capacity change from 0 to 512 [ 807.158177][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 807.173027][T15119] EXT4-fs: Ignoring removed nomblk_io_submit option [ 807.184893][T14972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 807.207654][T14972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 807.226769][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 807.236752][T15119] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2926: inode #16: comm syz.1.3491: corrupted xattr block 8 [ 807.251103][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 807.264247][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 807.272090][T15119] EXT4-fs (loop1): Remounting filesystem read-only [ 807.278716][T15119] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 807.299903][T15119] EXT4-fs (loop1): 1 orphan inode deleted [ 807.305996][T15119] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 807.354762][T15119] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038 (0x7fffffff) [ 807.437523][T13285] EXT4-fs (loop1): unmounting filesystem. [ 807.729117][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 807.747071][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 807.771864][T14972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.833485][ T3593] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 807.865063][ T3624] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 808.547858][T15142] loop3: detected capacity change from 0 to 256 [ 808.561856][T15142] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 808.576873][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.583415][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.593762][T15142] netlink: 896 bytes leftover after parsing attributes in process `syz.3.3497'. [ 808.833440][ T3593] usb 3-1: Using ep0 maxpacket: 8 [ 808.953711][ T3624] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 808.962729][ T3593] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 808.983157][ T3624] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 808.998558][ T3593] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 809.743374][ T3624] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 809.752371][ T3593] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 809.762204][ T3593] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 809.847174][T15160] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3501'. [ 809.894933][ T7127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 809.903540][ T3624] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 809.910226][ T7127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 809.922990][ T3624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.933109][ T3624] usb 1-1: Product: syz [ 809.937685][ T3593] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 809.953026][ T3624] usb 1-1: Manufacturer: 겺﹆ⴋ꫺壨呭혛㲊鍤팝堝ֿ帋쓽蠧烟卿胣⠶맰忟덭휡뛥ꐲ䚐ᢵ䑖䫲㷇䠒螤먓夓㗓衦ⶣႋ罴뭢㐅ꦩងလ櫓헺煩냹Ი蘥퉤 [ 809.972846][ T3593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.988704][ T3593] usb 3-1: Product: syz [ 809.992918][ T3593] usb 3-1: Manufacturer: syz [ 809.997968][ T3593] usb 3-1: SerialNumber: syz [ 810.003642][ T3624] usb 1-1: SerialNumber: syz [ 810.009538][ T3593] usb 3-1: config 0 descriptor?? [ 810.057114][ T3593] redrat3 3-1:0.0: Couldn't find all endpoints [ 810.140881][T14972] device veth0_vlan entered promiscuous mode [ 810.176058][T13661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 810.185133][T13661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 810.207128][T14972] device veth1_vlan entered promiscuous mode [ 810.218339][ T7127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 810.234040][ T7127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 810.241900][ T7127] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 810.270801][ T152] usb 3-1: USB disconnect, device number 72 [ 810.288375][T14972] device veth0_macvtap entered promiscuous mode [ 810.305162][T13661] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 810.313237][T13661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 810.333568][ T3624] usb 1-1: 0:2 : does not exist [ 810.344486][T13661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 810.349650][ T3624] usb 1-1: USB disconnect, device number 59 [ 810.353565][T13661] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 810.397221][T14972] device veth1_macvtap entered promiscuous mode [ 810.444370][T14972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.467483][T14972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.480544][T14972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.497947][T14972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.508113][T14972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.519071][T14972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.532236][T14972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.542863][T14972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.554349][T14972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.563723][T13661] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 810.571744][T13661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 810.580763][T13661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 810.604701][T14972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.616307][T14972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.626691][T14972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.639809][T14972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.650025][T14972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.660722][T14972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.671231][T14972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.681960][T14972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.692191][T14972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.703456][T14972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.715919][T14972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.726064][ T7127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 810.736700][ T7127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 810.747927][T14972] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.774004][T14972] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.782891][T14972] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.813488][T14972] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.927606][T15176] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3506'. [ 810.977542][ T3704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.999553][ T3704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.054214][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 811.095514][ T3680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.127094][ T3680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.175459][T13661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 811.863208][T15192] tipc: Started in network mode [ 811.880200][T15192] tipc: Node identity d2b3e2dc0926, cluster identity 4711 [ 811.889026][T15192] tipc: Enabled bearer , priority 0 [ 811.897614][T15198] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3514'. [ 811.912035][T15192] tipc: Resetting bearer [ 811.955623][T15191] tipc: Disabling bearer [ 812.273462][ T7127] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 812.636760][T15221] trusted_key: encrypted_key: insufficient parameters specified [ 812.673913][ T7125] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 812.783576][ T7127] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 812.797247][ T7127] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 813.167684][ T7127] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 813.547759][ T7127] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 813.560244][ T7127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.568791][ T7127] usb 4-1: Product: syz [ 813.572969][ T7127] usb 4-1: Manufacturer: 겺﹆ⴋ꫺壨呭혛㲊鍤팝堝ֿ帋쓽蠧烟卿胣⠶맰忟덭휡뛥ꐲ䚐ᢵ䑖䫲㷇䠒螤먓夓㗓衦ⶣႋ罴뭢㐅ꦩងလ櫓헺煩냹Ი蘥퉤 [ 813.593095][ T7125] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 813.603058][ T7127] usb 4-1: SerialNumber: syz [ 813.610851][ T7125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.625988][ T7125] usb 2-1: Product: syz [ 813.630249][ T7125] usb 2-1: Manufacturer: syz [ 813.637358][ T7125] usb 2-1: SerialNumber: syz [ 813.799331][ T7125] usb 2-1: config 0 descriptor?? [ 813.935971][ T7125] go7007: probe of 2-1:0.0 failed with error -12 [ 814.013896][ T7122] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 814.065997][ T7127] usb 4-1: 0:2 : does not exist [ 814.313789][ T7127] usb 4-1: USB disconnect, device number 64 [ 814.333651][ T7125] usb 2-1: USB disconnect, device number 54 [ 814.510506][ T7122] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.531206][ T7122] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 814.547348][ T7122] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 814.580112][ T7122] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.596516][ T7122] usb 5-1: config 0 descriptor?? [ 814.783447][ T152] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 815.153576][ T152] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 815.163378][ T152] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 815.173910][ T152] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 815.182931][ T152] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 815.194016][ T152] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 815.323582][ T152] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 815.332648][ T152] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 815.342652][ T152] usb 3-1: Product: syz [ 815.346909][ T152] usb 3-1: Manufacturer: syz [ 815.394311][ T152] cdc_wdm 3-1:1.0: skipping garbage [ 815.399638][ T152] cdc_wdm 3-1:1.0: skipping garbage [ 815.409204][ T152] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 815.416057][ T152] cdc_wdm 3-1:1.0: Unknown control protocol [ 815.600383][ T152] usb 3-1: USB disconnect, device number 73 [ 815.753389][ T26] audit: type=1326 audit(1721830190.172:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15268 comm="syz.0.3540" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1817f75f19 code=0x0 [ 815.781421][T15279] program syz.3.3543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 816.273521][ T3624] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 816.368606][ T152] usb 5-1: USB disconnect, device number 76 [ 816.422875][T15282] loop0: detected capacity change from 0 to 512 [ 816.447854][T15278] can: request_module (can-proto-5) failed. [ 816.454973][T15282] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 816.469693][T15283] loop3: detected capacity change from 0 to 2048 [ 816.506339][T15283] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 816.643480][ T3624] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 816.661422][ T3624] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 816.681850][ T3624] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 816.702213][ T3624] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 816.739078][ T3624] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 817.023417][ T7127] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 817.063616][ T3624] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 817.076608][ T3624] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 817.087224][ T3624] usb 3-1: Product: syz [ 817.091477][ T3624] usb 3-1: Manufacturer: syz [ 817.136704][ T3624] cdc_wdm 3-1:1.0: skipping garbage [ 817.142674][ T3624] cdc_wdm 3-1:1.0: skipping garbage [ 817.156334][ T3624] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 817.162349][ T3624] cdc_wdm 3-1:1.0: Unknown control protocol [ 817.623853][ T7127] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 817.632957][ T7127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.641671][ T7127] usb 1-1: Product: syz [ 817.646078][ T7127] usb 1-1: Manufacturer: syz [ 817.650743][ T7127] usb 1-1: SerialNumber: syz [ 817.660909][ T7127] usb 1-1: config 0 descriptor?? [ 817.726178][ T7127] go7007: probe of 1-1:0.0 failed with error -12 [ 817.739498][ T4931] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 817.754960][ T4931] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 438 with error 28 [ 817.767397][ T4931] EXT4-fs (loop3): This should not happen!! Data will be lost [ 817.767397][ T4931] [ 817.777105][ T4931] EXT4-fs (loop3): Total free blocks count 0 [ 817.783090][ T4931] EXT4-fs (loop3): Free/Dirty block details [ 817.789044][ T4931] EXT4-fs (loop3): free_blocks=2415919104 [ 817.795849][ T4931] EXT4-fs (loop3): dirty_blocks=448 [ 817.801591][ T4931] EXT4-fs (loop3): Block reservation details [ 817.807683][ T4931] EXT4-fs (loop3): i_reserved_data_blocks=28 [ 817.825156][T10971] EXT4-fs (loop3): unmounting filesystem. [ 817.928928][ T7127] usb 1-1: USB disconnect, device number 60 [ 818.427228][T15312] tipc: Enabled bearer , priority 0 [ 818.442672][T15312] tipc: Resetting bearer [ 818.462560][T15311] tipc: Disabling bearer [ 819.256157][ T152] usb 3-1: USB disconnect, device number 74 [ 819.609416][T15329] trusted_key: encrypted_key: insufficient parameters specified [ 820.297705][T15339] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3561'. [ 820.688387][T15355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3567'. [ 821.222352][T15370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3570'. [ 822.466319][T15375] tipc: Can't bind to reserved service type 0 [ 823.535757][T15385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3577'. [ 823.729809][T15396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3581'. [ 823.747564][T15397] trusted_key: encrypted_key: insufficient parameters specified [ 824.091802][T15417] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3589'. [ 824.173369][ T152] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 824.443721][ T7122] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 825.073815][ T7122] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 825.084162][ T7122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.092247][ T7122] usb 4-1: Product: syz [ 825.184233][ T152] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.186679][ T7122] usb 4-1: Manufacturer: syz [ 825.202811][ T7122] usb 4-1: SerialNumber: syz [ 825.217422][ T152] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 825.218437][ T7122] usb 4-1: config 0 descriptor?? [ 825.260806][ T152] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 825.275354][ T7122] go7007: probe of 4-1:0.0 failed with error -12 [ 825.297470][ T152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.322038][ T152] usb 5-1: config 0 descriptor?? [ 825.379814][ T152] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 825.494149][ T7124] usb 4-1: USB disconnect, device number 65 [ 825.576793][T15440] netlink: 'syz.0.3596': attribute type 10 has an invalid length. [ 825.605532][T15440] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.613540][T15440] bond0: (slave team0): Enslaving as an active interface with an up link [ 825.630739][T15440] netlink: 'syz.0.3596': attribute type 10 has an invalid length. [ 825.642919][T15440] bond0: (slave team0): Releasing backup interface [ 825.654964][T15440] bridge0: port 3(team0) entered blocking state [ 825.661435][T15440] bridge0: port 3(team0) entered disabled state [ 825.671343][T15440] device team0 entered promiscuous mode [ 825.677065][T15440] device team_slave_0 entered promiscuous mode [ 825.684280][T15440] device team_slave_1 entered promiscuous mode [ 825.943532][T15404] Bluetooth: hci0: command 0x0406 tx timeout [ 825.949619][T15404] Bluetooth: hci3: command 0x0406 tx timeout [ 826.535201][ T7125] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 826.626753][T15465] trusted_key: encrypted_key: insufficient parameters specified [ 826.665577][T15471] netlink: 'syz.1.3609': attribute type 10 has an invalid length. [ 826.693203][T15471] 8021q: adding VLAN 0 to HW filter on device team0 [ 826.705918][T15471] bond0: (slave team0): Enslaving as an active interface with an up link [ 826.725329][T15471] netlink: 'syz.1.3609': attribute type 10 has an invalid length. [ 826.738992][T15471] bond0: (slave team0): Releasing backup interface [ 826.755035][T15471] bridge0: port 3(team0) entered blocking state [ 826.767102][T15471] bridge0: port 3(team0) entered disabled state [ 826.774887][T15471] device team0 entered promiscuous mode [ 826.780427][T15471] device team_slave_0 entered promiscuous mode [ 826.787083][T15471] device team_slave_1 entered promiscuous mode [ 827.442644][ T3593] usb 5-1: USB disconnect, device number 77 [ 827.603548][ T7125] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 827.626859][ T7125] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 827.643456][ T7125] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 827.758015][T15487] loop0: detected capacity change from 0 to 1024 [ 827.771885][T15487] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3616'. [ 827.845675][T15490] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3616'. [ 827.855380][ T3624] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 827.882823][T15490] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.973593][ T7125] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 827.996027][ T7125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.133772][ T7125] usb 4-1: Product: syz [ 828.166864][ T7125] usb 4-1: Manufacturer: syz [ 828.198410][ T7125] usb 4-1: SerialNumber: syz [ 828.355506][ T7125] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 828.374370][ T7125] cdc_ncm 4-1:1.0: bind() failure [ 828.993525][ T3624] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 829.002791][ T3624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.010859][ T3624] usb 2-1: Product: syz [ 829.015113][ T3624] usb 2-1: Manufacturer: syz [ 829.019691][ T3624] usb 2-1: SerialNumber: syz [ 829.026641][ T3624] usb 2-1: config 0 descriptor?? [ 829.033622][ T3593] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 829.049335][T15501] loop3: detected capacity change from 0 to 2048 [ 829.053512][ T7129] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 829.065457][ T3624] go7007: probe of 2-1:0.0 failed with error -12 [ 829.087778][T15501] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 829.195738][T15501] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3600: bg 0: block 234: padding at end of block bitmap is not set [ 829.215444][T15501] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1316 with error 117 [ 829.229546][T15501] EXT4-fs (loop3): This should not happen!! Data will be lost [ 829.229546][T15501] [ 829.269712][ T3624] usb 2-1: USB disconnect, device number 55 [ 829.323425][ T7129] usb 5-1: Using ep0 maxpacket: 8 [ 829.393435][ T3593] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.403666][ T3593] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 829.416615][ T3593] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 829.428574][ T3593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.438836][ T3593] usb 3-1: config 0 descriptor?? [ 829.485490][ T3593] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 829.654268][ T7129] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 829.666193][ T7129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.676265][ T7129] usb 5-1: Product: syz [ 829.680494][ T7129] usb 5-1: Manufacturer: syz [ 829.691408][ T7129] usb 5-1: SerialNumber: syz [ 829.698793][ T7129] usb 5-1: config 0 descriptor?? [ 829.998086][ T7129] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 830.779609][ T3624] usb 4-1: USB disconnect, device number 66 [ 830.857788][T10971] EXT4-fs (loop3): unmounting filesystem. [ 830.884142][T15518] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3628'. [ 831.217615][T15531] trusted_key: encrypted_key: insufficient parameters specified [ 831.290875][T15535] tipc: Enabled bearer , priority 0 [ 831.300134][T15535] tipc: Resetting bearer [ 831.310098][T15534] tipc: Disabling bearer [ 831.353791][ T7129] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 831.363057][ T7129] usb 5-1: USB disconnect, device number 78 [ 831.798069][ T3194] usb 3-1: USB disconnect, device number 75 [ 831.938249][T15545] loop4: detected capacity change from 0 to 1024 [ 831.959598][T15545] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3638'. [ 832.044022][T15548] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3638'. [ 832.098079][T13302] Bluetooth: hci4: unexpected event for opcode 0x0c1c [ 832.105931][T15548] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.244242][T15553] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3641'. [ 832.253515][ T3194] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 832.494708][ T7122] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 832.513831][T15561] tipc: Enabled bearer , priority 0 [ 832.525814][T15561] tipc: Resetting bearer [ 832.550754][T15560] tipc: Disabling bearer [ 832.613622][ T3194] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.633816][ T3194] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 832.673433][ T3194] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 832.853609][ T3194] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 832.862727][ T3194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.871943][ T3194] usb 3-1: Product: syz [ 832.876635][ T3194] usb 3-1: Manufacturer: syz [ 832.881653][ T3194] usb 3-1: SerialNumber: syz [ 832.913792][ T7122] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.925545][ T3194] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 832.929866][ T7122] usb 4-1: config 0 has no interfaces? [ 832.938631][ T3194] cdc_ncm 3-1:1.0: bind() failure [ 832.939838][ T7122] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 832.966746][ T7122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.986874][ T7122] usb 4-1: config 0 descriptor?? [ 833.005493][ T7124] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 833.423587][ T7124] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.439561][ T7124] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 833.456799][ T7124] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 833.467556][ T7124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.483112][ T7124] usb 1-1: config 0 descriptor?? [ 833.536992][ T7124] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 833.601163][T15568] loop2: detected capacity change from 0 to 2048 [ 833.630967][T15568] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 833.787428][T15568] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3636: bg 0: block 234: padding at end of block bitmap is not set [ 833.803170][T15568] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 660 with error 117 [ 833.815808][T15568] EXT4-fs (loop2): This should not happen!! Data will be lost [ 833.815808][T15568] [ 833.893397][ T3624] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 834.133410][ T3624] usb 2-1: Using ep0 maxpacket: 8 [ 834.413486][ T3624] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 834.423250][ T3624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.431988][ T3624] usb 2-1: Product: syz [ 834.437061][ T3624] usb 2-1: Manufacturer: syz [ 834.441788][ T3624] usb 2-1: SerialNumber: syz [ 834.457082][ T3624] usb 2-1: config 0 descriptor?? [ 834.723490][ T3624] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 835.113573][ T3194] usb 4-1: USB disconnect, device number 67 [ 835.135564][T15577] trusted_key: encrypted_key: insufficient parameters specified [ 835.241820][ T7124] usb 3-1: USB disconnect, device number 76 [ 835.251580][T15583] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3653'. [ 835.276739][T13298] EXT4-fs (loop2): unmounting filesystem. [ 836.466237][ T7129] usb 1-1: USB disconnect, device number 61 [ 836.583508][ T3624] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 836.595926][ T3624] usb 2-1: USB disconnect, device number 56 [ 836.605211][T15600] trusted_key: encrypted_key: insufficient parameters specified [ 836.839897][ T3194] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 837.026789][T15609] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3663'. [ 837.103404][ T3194] usb 3-1: Using ep0 maxpacket: 16 [ 837.193440][ T7129] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 837.223692][ T3194] usb 3-1: config 0 has no interfaces? [ 837.343580][ T3194] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 837.383368][ T3194] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 837.427404][ T3194] usb 3-1: Product: syz [ 837.431586][ T3194] usb 3-1: SerialNumber: syz [ 837.480660][ T3194] usb 3-1: config 0 descriptor?? [ 837.583449][ T7129] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.598695][ T7129] usb 1-1: config 0 has no interfaces? [ 837.608950][ T7129] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 837.623568][ T7129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.648078][ T7129] usb 1-1: config 0 descriptor?? [ 837.769352][T15601] loop2: detected capacity change from 0 to 128 [ 837.817398][T15601] EXT4-fs (loop2): Test dummy encryption mode enabled [ 837.885936][T15601] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 837.940287][T15601] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038 (0x7fffffff) [ 838.883478][ T3194] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 838.925877][T15637] trusted_key: encrypted_key: insufficient parameters specified [ 839.843586][ T3194] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.862622][ T3194] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 839.893485][ T3194] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 839.912737][ T3194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.928315][ T3624] usb 1-1: USB disconnect, device number 62 [ 839.943682][ T3194] usb 4-1: config 0 descriptor?? [ 839.963634][T15648] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3675'. [ 839.995693][ T3194] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 840.334323][T15656] trusted_key: encrypted_key: insufficient parameters specified [ 840.346861][ T3194] usb 3-1: USB disconnect, device number 77 [ 840.419494][T13298] EXT4-fs (loop2): unmounting filesystem. [ 840.443560][ T3624] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 840.697533][ T3624] usb 2-1: Using ep0 maxpacket: 8 [ 840.817829][ T3624] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 840.853490][ T3624] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 840.863179][ T3624] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 841.054721][ T3624] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 841.074733][ T3624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.099490][ T3624] usb 2-1: Product: syz [ 841.115254][ T3624] usb 2-1: Manufacturer: syz [ 841.133375][ T3624] usb 2-1: SerialNumber: syz [ 841.148690][ T3624] usb 2-1: config 0 descriptor?? [ 842.507483][ T7125] usb 4-1: USB disconnect, device number 68 [ 842.624794][ T3624] redrat3 2-1:0.0: Couldn't find all endpoints [ 842.635669][ T3624] usb 2-1: USB disconnect, device number 57 [ 842.817527][T13302] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 842.968788][T15684] loop1: detected capacity change from 0 to 512 [ 842.996784][T15681] trusted_key: encrypted_key: insufficient parameters specified [ 843.060393][T15684] EXT4-fs (loop1): 1 orphan inode deleted [ 843.070163][T15684] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 843.084765][T15684] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038 (0x7fffffff) [ 843.273397][ T152] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 843.328771][T15689] syz.1.3686[15689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 843.329301][T15689] syz.1.3686[15689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 843.357223][ T7125] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 843.926224][T13285] EXT4-fs (loop1): unmounting filesystem. [ 844.233780][ T152] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.269293][ T152] usb 3-1: config 0 has no interfaces? [ 844.275239][ T152] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 844.309838][ T152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.330940][ T152] usb 3-1: config 0 descriptor?? [ 844.443623][ T7125] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 844.463587][ T7125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.493990][ T7125] usb 4-1: config 0 descriptor?? [ 844.950345][T15699] loop4: detected capacity change from 0 to 40427 [ 844.963168][T15699] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 844.971665][T15699] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 844.995269][T15699] F2FS-fs (loop4): invalid crc_offset: 12 [ 845.001111][T15699] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 845.008367][ T152] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 845.253552][ T152] usb 2-1: Using ep0 maxpacket: 8 [ 845.285032][T15699] loop4: detected capacity change from 0 to 16 [ 845.297654][T15699] erofs: (device loop4): mounted with root inode @ nid 36. [ 845.373504][ T152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 845.440235][ T152] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 845.451570][ T152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 845.467238][ T152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 845.983605][ T152] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 845.992710][ T152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.064557][ T152] usb 2-1: Product: syz [ 846.068763][ T152] usb 2-1: Manufacturer: syz [ 846.076560][ T152] usb 2-1: SerialNumber: syz [ 846.082820][ T3194] usb 3-1: USB disconnect, device number 78 [ 846.100318][ T152] usb 2-1: config 0 descriptor?? [ 846.133652][ T7125] pegasus 4-1:0.0: can't reset MAC [ 846.138915][ T7125] pegasus: probe of 4-1:0.0 failed with error -5 [ 846.162736][ T7125] usb 4-1: USB disconnect, device number 69 [ 846.303802][ T152] redrat3 2-1:0.0: Couldn't find all endpoints [ 846.710621][ T7125] usb 2-1: USB disconnect, device number 58 [ 847.118558][T15728] trusted_key: encrypted_key: insufficient parameters specified [ 847.525524][T13302] Bluetooth: hci4: unexpected event for opcode 0x0c1c [ 847.893393][ T3624] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 848.067370][T15755] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3711'. [ 848.303659][ T3624] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.381809][ T3624] usb 4-1: config 0 has no interfaces? [ 848.405979][ T3624] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 848.424932][ T3624] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.447396][ T3624] usb 4-1: config 0 descriptor?? [ 848.802484][T15763] loop4: detected capacity change from 0 to 2048 [ 848.838871][T15763] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 848.863414][ T7124] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 849.053482][ T7124] usb 3-1: device descriptor read/64, error -71 [ 849.333708][ T7124] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 849.533420][ T7124] usb 3-1: device descriptor read/64, error -71 [ 849.653690][ T7124] usb usb3-port1: attempt power cycle [ 849.663520][ T3624] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 849.913472][ T3624] usb 1-1: Using ep0 maxpacket: 8 [ 849.946148][ T7815] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 849.965998][ T7815] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1612 with error 28 [ 849.978803][ T7815] EXT4-fs (loop4): This should not happen!! Data will be lost [ 849.978803][ T7815] [ 849.988753][ T7815] EXT4-fs (loop4): Total free blocks count 0 [ 850.003384][ T7815] EXT4-fs (loop4): Free/Dirty block details [ 850.009928][ T7815] EXT4-fs (loop4): free_blocks=2415919104 [ 850.021122][ T7815] EXT4-fs (loop4): dirty_blocks=1616 [ 850.027549][ T7815] EXT4-fs (loop4): Block reservation details [ 850.033548][ T3624] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 850.033575][ T3624] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 850.033598][ T3624] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 850.033620][ T3624] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 850.074281][ T7815] EXT4-fs (loop4): i_reserved_data_blocks=101 [ 850.083523][ T7124] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 850.138574][T14972] EXT4-fs (loop4): unmounting filesystem. [ 850.192488][T15775] loop4: detected capacity change from 0 to 512 [ 850.193627][ T3624] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 850.203483][ T7124] usb 3-1: device descriptor read/8, error -71 [ 850.218899][ T3624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.227539][ T3624] usb 1-1: Product: syz [ 850.232976][ T3624] usb 1-1: Manufacturer: syz [ 850.237761][ T3624] usb 1-1: SerialNumber: syz [ 850.256270][T15775] EXT4-fs (loop4): 1 orphan inode deleted [ 850.269986][T15775] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 850.270115][ T3624] usb 1-1: config 0 descriptor?? [ 850.279499][T15775] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038 (0x7fffffff) [ 850.335699][ T3624] redrat3 1-1:0.0: Couldn't find all endpoints [ 850.523454][T15779] syz.4.3717[15779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 850.523884][T15779] syz.4.3717[15779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 850.644009][ T7124] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 851.100024][ T7125] usb 1-1: USB disconnect, device number 63 [ 851.171388][T14972] EXT4-fs (loop4): unmounting filesystem. [ 851.199465][ T7124] usb 3-1: device descriptor read/8, error -71 [ 851.238161][ T3624] usb 4-1: USB disconnect, device number 70 [ 851.325845][ T7124] usb usb3-port1: unable to enumerate USB device [ 851.375248][T15792] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3722'. [ 851.523432][T15788] trusted_key: encrypted_key: insufficient parameters specified [ 851.783492][ T3624] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 851.845349][T15808] loop1: detected capacity change from 0 to 2048 [ 851.872728][T15812] loop2: detected capacity change from 0 to 512 [ 851.889841][T15808] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 851.893874][T15812] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 851.907729][T15812] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038 (0x7fffffff) [ 852.053513][ T152] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 852.153454][ T3624] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 852.916021][ T3624] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 852.956378][T13298] EXT4-fs (loop2): unmounting filesystem. [ 853.002964][T15825] loop2: detected capacity change from 0 to 512 [ 853.024195][ T3624] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 853.037732][ T3624] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 853.059568][ T3624] usb 4-1: SerialNumber: syz [ 853.070821][T15825] EXT4-fs (loop2): 1 orphan inode deleted [ 853.090419][T15825] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 853.093626][ T152] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.112793][ T152] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 853.126589][ T152] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 853.135725][ T152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.144971][T15825] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038 (0x7fffffff) [ 853.163577][ T152] usb 5-1: config 0 descriptor?? [ 853.215336][ T152] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 853.304243][T15766] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 853.345657][ T3624] usb 4-1: 0:2 : does not exist [ 853.400141][T15829] syz.2.3730[15829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 853.400460][T15829] syz.2.3730[15829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 854.080314][ T3624] usb 4-1: unit 5 not found! [ 854.108935][T13298] EXT4-fs (loop2): unmounting filesystem. [ 854.193978][T13302] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 854.543470][ T3624] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 854.661855][ T7124] usb 4-1: USB disconnect, device number 71 [ 854.728836][ T4931] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2026 with error 28 [ 854.751243][T15837] loop3: detected capacity change from 0 to 128 [ 854.751764][ T4931] EXT4-fs (loop1): This should not happen!! Data will be lost [ 854.751764][ T4931] [ 854.768836][ T4931] EXT4-fs (loop1): Total free blocks count 0 [ 854.780017][ T4931] EXT4-fs (loop1): Free/Dirty block details [ 854.795212][ T4931] EXT4-fs (loop1): free_blocks=2415919104 [ 854.808911][ T4931] EXT4-fs (loop1): dirty_blocks=2032 [ 854.817425][ T4931] EXT4-fs (loop1): Block reservation details [ 854.829717][ T4931] EXT4-fs (loop1): i_reserved_data_blocks=127 [ 854.913489][ T3624] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.941634][ T3624] usb 3-1: config 0 has no interfaces? [ 854.945547][T13285] EXT4-fs (loop1): unmounting filesystem. [ 854.981922][ T3624] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 854.991450][ T3624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.050387][ T3624] usb 3-1: config 0 descriptor?? [ 855.250851][ T3624] usb 5-1: USB disconnect, device number 79 [ 855.367044][T15846] trusted_key: encrypted_key: insufficient parameters specified [ 855.403569][ T7124] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 855.613409][ T7124] usb 2-1: device descriptor read/64, error -71 [ 855.683439][ T3624] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 855.913514][ T7124] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 855.933538][ T3624] usb 5-1: Using ep0 maxpacket: 8 [ 856.062557][T15850] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3736'. [ 856.193361][ T7124] usb 2-1: device descriptor read/64, error -71 [ 856.213444][ T3624] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 856.233658][ T3624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.278579][ T3624] usb 5-1: Product: syz [ 856.290782][ T3624] usb 5-1: Manufacturer: syz [ 856.309694][ T3624] usb 5-1: SerialNumber: syz [ 856.327294][ T7124] usb usb2-port1: attempt power cycle [ 856.372690][ T3624] usb 5-1: config 0 descriptor?? [ 856.642469][ T3624] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 856.765675][ T7124] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 856.874807][ T7124] usb 2-1: device descriptor read/8, error -71 [ 857.163362][ T7124] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 857.218390][ T152] usb 3-1: USB disconnect, device number 83 [ 857.273631][ T7124] usb 2-1: device descriptor read/8, error -71 [ 857.383835][ T3624] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 857.393598][ T3624] usb 5-1: USB disconnect, device number 80 [ 857.393817][ T7124] usb usb2-port1: unable to enumerate USB device [ 857.633399][ T152] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 857.993488][ T152] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.003811][ T152] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 858.093694][ T152] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 858.103610][ T152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 858.130025][ T152] usb 3-1: SerialNumber: syz [ 858.406147][ T152] usb 3-1: 0:2 : does not exist [ 858.419127][ T152] usb 3-1: unit 5 not found! [ 858.570741][ T26] audit: type=1326 audit(1721830232.992:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f9575f19 code=0x7ffc0000 [ 858.639630][ T26] audit: type=1326 audit(1721830232.992:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f9575f19 code=0x7ffc0000 [ 858.689661][ T26] audit: type=1326 audit(1721830233.032:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd9f9575f19 code=0x7ffc0000 [ 858.743657][ T26] audit: type=1326 audit(1721830233.052:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f9575f19 code=0x7ffc0000 [ 858.790967][ T26] audit: type=1326 audit(1721830233.052:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15884 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9f95a7f05 code=0x7ffc0000 [ 858.820832][ T26] audit: type=1326 audit(1721830233.092:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f9575f19 code=0x7ffc0000 [ 858.851119][ T26] audit: type=1326 audit(1721830233.102:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fd9f9575f19 code=0x7ffc0000 [ 858.881064][ T26] audit: type=1326 audit(1721830233.102:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f9575f19 code=0x7ffc0000 [ 858.924891][ T26] audit: type=1326 audit(1721830233.102:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9f9511909 code=0x7ffc0000 [ 859.009445][ T26] audit: type=1326 audit(1721830233.102:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f9575f19 code=0x7ffc0000 [ 859.143520][T15889] trusted_key: encrypted_key: insufficient parameters specified [ 859.983481][T15896] loop1: detected capacity change from 0 to 256 [ 860.030271][T15896] FAT-fs (loop1): Directory bread(block 64) failed [ 860.038526][T15896] FAT-fs (loop1): Directory bread(block 65) failed [ 860.046122][T15896] FAT-fs (loop1): Directory bread(block 66) failed [ 860.053209][T15896] FAT-fs (loop1): Directory bread(block 67) failed [ 860.060803][T15896] FAT-fs (loop1): Directory bread(block 68) failed [ 860.068188][T15896] FAT-fs (loop1): Directory bread(block 69) failed [ 860.075917][T15896] FAT-fs (loop1): Directory bread(block 70) failed [ 860.083023][T15896] FAT-fs (loop1): Directory bread(block 71) failed [ 860.091033][T15896] FAT-fs (loop1): Directory bread(block 72) failed [ 860.100676][T15896] FAT-fs (loop1): Directory bread(block 73) failed [ 860.157615][T13302] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 860.271574][T15898] overlayfs: missing 'lowerdir' [ 860.283223][ T7122] usb 3-1: USB disconnect, device number 84 [ 860.877043][T15907] loop3: detected capacity change from 0 to 512 [ 860.914593][T15907] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 860.928432][T15907] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038 (0x7fffffff) [ 861.926858][ T152] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 861.937556][T10971] EXT4-fs (loop3): unmounting filesystem. [ 862.373905][ T152] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.402059][ T152] usb 1-1: config 0 has no interfaces? [ 862.431263][ T152] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 862.495485][ T152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.560394][ T152] usb 1-1: config 0 descriptor?? [ 863.933842][ T152] usb 1-1: USB disconnect, device number 64 [ 864.320103][T15959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3768'. [ 864.833592][T13302] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 865.090816][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3779'. [ 865.243411][ T7120] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 865.623669][ T7120] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.647908][ T7120] usb 2-1: config 0 has no interfaces? [ 865.681553][ T7120] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 865.834545][ T7120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.901033][ T7120] usb 2-1: config 0 descriptor?? [ 867.871125][ T3593] usb 2-1: USB disconnect, device number 63 [ 868.453508][ T7120] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 868.573402][ T3194] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 868.705474][ T7120] usb 4-1: Using ep0 maxpacket: 8 [ 868.710658][T15919] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 868.798516][T13302] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 868.813602][ T3194] usb 3-1: Using ep0 maxpacket: 16 [ 869.023767][ T7120] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 869.039769][ T7120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.048238][ T7120] usb 4-1: Product: syz [ 869.052923][ T7120] usb 4-1: Manufacturer: syz [ 869.057740][ T7120] usb 4-1: SerialNumber: syz [ 869.065410][ T7120] usb 4-1: config 0 descriptor?? [ 869.093801][ T3194] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 869.103486][T15919] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 869.118639][T15919] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 869.123791][ T3194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.135911][T15919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.140837][ T3194] usb 3-1: Product: syz [ 869.145947][T15919] usb 5-1: config 0 descriptor?? [ 869.154811][ T3194] usb 3-1: Manufacturer: syz [ 869.160187][ T3194] usb 3-1: SerialNumber: syz [ 869.171029][ T3194] usb 3-1: config 0 descriptor?? [ 869.204625][T15919] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 869.214562][ T3194] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 869.333622][ T7120] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 869.653440][ T3194] usb 3-1: clie_3_5_startup: get interface number failed: -71 [ 869.662854][ T3194] visor: probe of 3-1:0.0 failed with error -71 [ 869.688936][ T3194] usb 3-1: USB disconnect, device number 85 [ 869.945047][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.951396][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.103744][ T7120] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 870.127446][ T7120] usb 4-1: USB disconnect, device number 72 [ 870.647188][T16081] loop0: detected capacity change from 0 to 2048 [ 870.658136][ T7120] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 870.717207][T16081] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 870.936511][ T7120] usb 3-1: Using ep0 maxpacket: 8 [ 871.077246][ T7120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 871.101038][ T7120] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 871.135126][ T7120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 871.170297][ T7120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 871.176946][T16092] tipc: Enabling of bearer rejected, failed to enable media [ 871.384453][ T7120] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 871.404743][ T7120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.414130][ T7120] usb 3-1: Product: syz [ 871.418621][ T7120] usb 3-1: Manufacturer: syz [ 871.424003][ T7120] usb 3-1: SerialNumber: syz [ 871.441778][ T7120] usb 3-1: config 0 descriptor?? [ 871.511897][ T3593] usb 5-1: USB disconnect, device number 81 [ 871.555084][ T7120] redrat3 3-1:0.0: Couldn't find all endpoints [ 871.761680][ T3593] usb 3-1: USB disconnect, device number 86 [ 871.943477][ T152] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 872.188478][ T9389] EXT4-fs (loop0): unmounting filesystem. [ 872.209660][T16109] loop1: detected capacity change from 0 to 1024 [ 872.224701][T16109] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3820'. [ 872.287562][T16112] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3820'. [ 872.303491][ T152] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 872.328261][ T152] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 872.332387][T16112] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.433505][ T152] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 872.468323][ T152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 872.483504][ T152] usb 4-1: SerialNumber: syz [ 872.755688][ T152] usb 4-1: 0:2 : does not exist [ 872.767432][ T152] usb 4-1: unit 5 not found! [ 872.803875][ T7122] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 873.193502][ T7122] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.215787][ T7122] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 873.230067][ T7122] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.244482][ T7122] usb 1-1: config 0 descriptor?? [ 873.295373][ T7122] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 874.673182][ T3593] usb 4-1: USB disconnect, device number 73 [ 874.780271][T16139] loop3: detected capacity change from 0 to 2048 [ 874.800782][T16139] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 875.560908][ T7120] usb 1-1: USB disconnect, device number 65 [ 875.633442][ T7122] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 875.715334][T16152] loop0: detected capacity change from 0 to 128 [ 875.801771][T16086] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 875.936814][ T7122] usb 2-1: Using ep0 maxpacket: 8 [ 876.093591][ T7122] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 876.123492][ T7122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 876.192278][ T7122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 876.218427][T10971] EXT4-fs (loop3): unmounting filesystem. [ 876.377032][ T7122] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 876.388043][T16160] fuse: Bad value for 'fd' [ 876.398373][ T7122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.413057][ T7122] usb 2-1: Product: syz [ 876.417287][ T7122] usb 2-1: Manufacturer: syz [ 876.421890][ T7122] usb 2-1: SerialNumber: syz [ 876.434747][ T7122] usb 2-1: config 0 descriptor?? [ 876.499102][ T7122] redrat3 2-1:0.0: Couldn't find all endpoints [ 876.697652][ T7122] usb 2-1: USB disconnect, device number 64 [ 877.550603][T16185] loop1: detected capacity change from 0 to 2048 [ 877.673677][T16185] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 877.693409][ T7120] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 877.935403][ T7120] usb 4-1: Using ep0 maxpacket: 32 [ 878.083618][ T7120] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 878.104272][ T7120] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 878.163336][ T7120] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 878.223599][ T7120] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 878.279673][ T7120] usb 4-1: config 0 interface 0 has no altsetting 0 [ 878.493498][ T7120] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 878.509331][ T7120] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 878.545763][ T7120] usb 4-1: Product: syz [ 878.567709][ T7120] usb 4-1: Manufacturer: syz [ 878.579965][ T7120] usb 4-1: SerialNumber: syz [ 878.617866][ T7120] usb 4-1: config 0 descriptor?? [ 878.674868][ T7120] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 878.702650][ T7120] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 878.883500][ T7120] usb 4-1: USB disconnect, device number 74 [ 878.895483][ T7120] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 879.038577][ T3923] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 879.072925][ T3923] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 528 with error 28 [ 879.095139][ T3923] EXT4-fs (loop1): This should not happen!! Data will be lost [ 879.095139][ T3923] [ 879.106616][ T3923] EXT4-fs (loop1): Total free blocks count 0 [ 879.112954][ T3923] EXT4-fs (loop1): Free/Dirty block details [ 879.119905][ T3923] EXT4-fs (loop1): free_blocks=2415919104 [ 879.126832][ T3923] EXT4-fs (loop1): dirty_blocks=528 [ 879.157290][ T3923] EXT4-fs (loop1): Block reservation details [ 879.184548][ T3923] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 879.242502][T13285] EXT4-fs (loop1): unmounting filesystem. [ 879.551708][T16202] loop3: detected capacity change from 0 to 128 [ 879.685842][T16205] fuse: Bad value for 'fd' [ 880.609899][T16217] loop0: detected capacity change from 0 to 512 [ 880.646162][T16217] ext4: Bad value for 'max_batch_time' [ 880.763483][ T152] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 880.838267][T16221] loop2: detected capacity change from 0 to 2048 [ 880.921424][T16221] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 881.011942][ T152] usb 2-1: Using ep0 maxpacket: 8 [ 881.133589][ T152] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 881.157575][ T152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 881.184080][ T152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 881.363575][ T152] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 881.386238][ T152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.434134][ T152] usb 2-1: Product: syz [ 881.440540][T16230] loop0: detected capacity change from 0 to 16 [ 881.456556][ T152] usb 2-1: Manufacturer: syz [ 881.469468][T16230] erofs: (device loop0): mounted with root inode @ nid 36. [ 881.485217][ T152] usb 2-1: SerialNumber: syz [ 881.517606][ T152] usb 2-1: config 0 descriptor?? [ 881.584997][ T152] redrat3 2-1:0.0: Couldn't find all endpoints [ 881.783606][ T7120] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 881.795284][ T152] usb 2-1: USB disconnect, device number 65 [ 882.003468][T15919] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 882.053502][ T7120] usb 1-1: Using ep0 maxpacket: 16 [ 882.351024][T16236] trusted_key: encrypted_key: insufficient parameters specified [ 882.365677][ T7120] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 882.386896][ T7120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.395659][T15919] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 882.423109][T15919] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 882.439421][ T7120] usb 1-1: Product: syz [ 882.447766][T16224] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 882.458278][ T7120] usb 1-1: Manufacturer: syz [ 882.484587][ T7120] usb 1-1: SerialNumber: syz [ 882.500842][ T7120] usb 1-1: config 0 descriptor?? [ 882.564321][T15919] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 882.574331][ T7120] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 882.589019][T15919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 882.598393][T15919] usb 4-1: SerialNumber: syz [ 882.605196][ T4931] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 410 with error 28 [ 882.640005][ T4931] EXT4-fs (loop2): This should not happen!! Data will be lost [ 882.640005][ T4931] [ 882.650922][ T4931] EXT4-fs (loop2): Total free blocks count 0 [ 882.658162][ T4931] EXT4-fs (loop2): Free/Dirty block details [ 882.683928][ T4931] EXT4-fs (loop2): free_blocks=2415919104 [ 882.707195][ T4931] EXT4-fs (loop2): dirty_blocks=416 [ 882.720035][ T4931] EXT4-fs (loop2): Block reservation details [ 882.726287][ T4931] EXT4-fs (loop2): i_reserved_data_blocks=26 [ 882.763085][T13298] EXT4-fs (loop2): unmounting filesystem. [ 882.823267][T13302] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 882.860166][T16243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3863'. [ 882.868253][T16217] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 882.885541][T15919] usb 4-1: 0:2 : does not exist [ 882.890457][T15919] usb 4-1: unit 5 not found! [ 882.907574][T16243] openvswitch: netlink: Message has 12 unknown bytes. [ 882.938186][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 882.938199][ T26] audit: type=1800 audit(1721830257.362:188): pid=16217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3857" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 883.372443][T13302] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 883.422897][T16255] fuse: Bad value for 'fd' [ 883.723429][ T7122] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 883.934204][ T7122] usb 2-1: device descriptor read/64, error -71 [ 884.224396][ T7122] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 884.308083][T15919] usb 1-1: USB disconnect, device number 66 [ 884.443482][ T7122] usb 2-1: device descriptor read/64, error -71 [ 884.581491][ T7122] usb usb2-port1: attempt power cycle [ 884.779800][T15919] usb 4-1: USB disconnect, device number 75 [ 884.949813][T16272] loop3: detected capacity change from 0 to 2048 [ 885.022831][ T7122] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 885.803526][ T7122] usb 2-1: device descriptor read/8, error -71 [ 885.886128][T16272] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 886.093413][ T7122] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 991.143322][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 991.150328][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16291/1:b..l [ 991.159116][ C0] (detected by 0, t=10502 jiffies, g=102865, q=14 ncpus=2) [ 991.166415][ C0] task:syz.2.3871 state:R running task stack:24312 pid:16291 ppid:13298 flags:0x00004000 [ 991.178894][ C0] Call Trace: [ 991.182181][ C0] [ 991.185124][ C0] __schedule+0x143f/0x4570 [ 991.189769][ C0] ? __sched_text_start+0x8/0x8 [ 991.194640][ C0] ? print_irqtrace_events+0x210/0x210 [ 991.200161][ C0] ? mark_lock+0x9a/0x340 [ 991.204504][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 991.209795][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 991.214908][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 991.220635][ C0] ? rcu_is_watching+0x11/0xb0 [ 991.225456][ C0] irqentry_exit+0x53/0x80 [ 991.229917][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 991.235929][ C0] RIP: 0010:__ip_dev_find+0x0/0x5c0 [ 991.241153][ C0] Code: e9 42 ff ff ff 89 d9 80 e1 07 38 c1 0f 8c 5a ff ff ff 48 89 df e8 a0 16 c7 f8 e9 4d ff ff ff cc cc cc cc cc cc cc cc cc cc cc <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 20 01 [ 991.260763][ C0] RSP: 0018:ffffc9000a34f090 EFLAGS: 00000246 [ 991.266832][ C0] RAX: 0000000000000002 RBX: 000000000100007f RCX: 0000000000040000 [ 991.274807][ C0] RDX: 0000000000000000 RSI: 000000000100007f RDI: ffff888021f3b880 [ 991.282777][ C0] RBP: 0000000000000000 R08: ffffffff8902c463 R09: fffffbfff2093845 [ 991.290748][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc9000a34f180 [ 991.298719][ C0] R13: 0000000000000000 R14: ffffc9000a34f3a0 R15: dffffc0000000000 [ 991.306700][ C0] ? ip_route_output_key_hash_rcu+0x183/0x2380 [ 991.312926][ C0] ip_route_output_key_hash_rcu+0x196/0x2380 [ 991.318919][ C0] ? ip_route_output_key_hash+0x155/0x360 [ 991.324641][ C0] ? ip_route_output_key_hash+0x155/0x360 [ 991.330364][ C0] ip_route_output_key_hash+0x207/0x360 [ 991.335919][ C0] ? ip_route_input_rcu+0x3960/0x3960 [ 991.341297][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 991.346337][ C0] ip_route_output_flow+0x25/0x130 [ 991.351452][ C0] udp_sendmsg+0x1846/0x2ad0 [ 991.356060][ C0] ? ip_skb_dst_mtu+0x9d0/0x9d0 [ 991.360922][ C0] ? udp_cmsg_send+0x340/0x340 [ 991.365702][ C0] ? unwind_next_frame+0x1a3f/0x2220 [ 991.371015][ C0] ? deref_stack_reg+0x17c/0x210 [ 991.375957][ C0] ? validate_chain+0x112/0x5950 [ 991.380902][ C0] ? 0xffffffffa0003bc0 [ 991.385066][ C0] ? 0xffffffffa0003bc0 [ 991.389225][ C0] ? kernel_text_address+0x9f/0xd0 [ 991.394399][ C0] udpv6_sendmsg+0xd24/0x30e0 [ 991.399137][ C0] ? udp_v6_early_demux+0xfe0/0xfe0 [ 991.404365][ C0] ? tomoyo_socket_bind_permission+0x330/0x330 [ 991.410556][ C0] ? inet_send_prepare+0x1d/0x250 [ 991.415595][ C0] ? inet_send_prepare+0x56/0x250 [ 991.420630][ C0] ? inet6_compat_ioctl+0x550/0x550 [ 991.425867][ C0] ____sys_sendmsg+0x5a5/0x8f0 [ 991.430655][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 991.435679][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 991.440891][ C0] ? __might_fault+0xa1/0x110 [ 991.445613][ C0] __sys_sendmmsg+0x3ab/0x730 [ 991.450308][ C0] ? __ia32_sys_sendmsg+0x90/0x90 [ 991.455350][ C0] ? futex_unqueue+0xc7/0xf0 [ 991.459986][ C0] ? futex_wait_setup+0x340/0x340 [ 991.465020][ C0] ? futex_wake+0x4ea/0x590 [ 991.469550][ C0] ? do_futex+0x3b5/0x490 [ 991.473910][ C0] ? print_irqtrace_events+0x210/0x210 [ 991.479381][ C0] ? syscall_enter_from_user_mode+0x2e/0x230 [ 991.485369][ C0] __x64_sys_sendmmsg+0x9c/0xb0 [ 991.490223][ C0] do_syscall_64+0x3b/0xb0 [ 991.494652][ C0] ? clear_bhb_loop+0x45/0xa0 [ 991.499339][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 991.505250][ C0] RIP: 0033:0x7fae1d775f19 [ 991.509684][ C0] RSP: 002b:00007fae1e4bf048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 991.518119][ C0] RAX: ffffffffffffffda RBX: 00007fae1d906110 RCX: 00007fae1d775f19 [ 991.526104][ C0] RDX: 0400000000000172 RSI: 0000000020003cc0 RDI: 0000000000000003 [ 991.534084][ C0] RBP: 00007fae1d7e4e68 R08: 0000000000000000 R09: 0000000000000000 [ 991.542059][ C0] R10: 0000000004000300 R11: 0000000000000246 R12: 0000000000000000 [ 991.550036][ C0] R13: 000000000000006e R14: 00007fae1d906110 R15: 00007fff2f825c88 [ 991.558028][ C0] [ 991.561050][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10542 jiffies! g102865 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 991.573463][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=59781 [ 991.581347][ C0] rcu: rcu_preempt kthread starved for 10543 jiffies! g102865 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 991.592801][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 991.602769][ C0] rcu: RCU grace-period kthread stack dump: [ 991.608654][ C0] task:rcu_preempt state:I stack:26144 pid:16 ppid:2 flags:0x00004000 [ 991.617868][ C0] Call Trace: [ 991.621153][ C0] [ 991.624091][ C0] __schedule+0x143f/0x4570 [ 991.628612][ C0] ? _raw_spin_unlock+0x40/0x40 [ 991.633488][ C0] ? __sched_text_start+0x8/0x8 [ 991.638355][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 991.643736][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 991.649660][ C0] ? _raw_spin_unlock+0x40/0x40 [ 991.654527][ C0] schedule+0xbf/0x180 [ 991.658602][ C0] schedule_timeout+0x1b9/0x300 [ 991.663468][ C0] ? console_conditional_schedule+0x40/0x40 [ 991.669369][ C0] ? update_process_times+0x1b0/0x1b0 [ 991.674829][ C0] ? prepare_to_swait_event+0x329/0x350 [ 991.680418][ C0] rcu_gp_fqs_loop+0x2d2/0x1150 [ 991.685322][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 991.690531][ C0] ? rcu_gp_init+0x15f0/0x15f0 [ 991.695306][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 991.701218][ C0] ? finish_swait+0xcf/0x1e0 [ 991.705820][ C0] rcu_gp_kthread+0xa3/0x3b0 [ 991.710423][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 991.715565][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 991.721474][ C0] ? __kthread_parkme+0x168/0x1c0 [ 991.726511][ C0] kthread+0x28d/0x320 [ 991.730623][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 991.735739][ C0] ? kthread_blkcg+0xd0/0xd0 [ 991.740329][ C0] ret_from_fork+0x1f/0x30 [ 991.744774][ C0] [ 991.747790][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 991.754115][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.100-syzkaller #0 [ 991.761830][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 991.771897][ C0] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 991.777723][ C0] Code: 0b f5 f6 48 83 e3 08 0f 85 0b 01 00 00 4c 8d 74 24 20 e8 f4 c9 fb f6 0f 1f 44 00 00 e8 4a 07 f5 f6 0f 00 2d 63 d5 b1 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 3b 8f 4c f7 [ 991.797340][ C0] RSP: 0018:ffffffff8ce07b20 EFLAGS: 000002d3 [ 991.803417][ C0] RAX: ffffffff8a959336 RBX: 0000000000000000 RCX: ffffffff8cebd800 [ 991.811390][ C0] RDX: 0000000000000000 RSI: ffffffff8aec0240 RDI: ffffffff8b3d48a0 [ 991.819363][ C0] RBP: ffffffff8ce07bb0 R08: ffffffff8a959318 R09: fffffbfff19d7b01 [ 991.827342][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff19c0f64 [ 991.835328][ C0] R13: ffff888016bc1804 R14: ffffffff8ce07b40 R15: dffffc0000000000 [ 991.843312][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 991.852249][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 991.858845][ C0] CR2: 0000000000000000 CR3: 000000005e893000 CR4: 00000000003506f0 [ 991.866824][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 991.874883][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 991.883033][ C0] Call Trace: [ 991.886322][ C0] [ 991.889178][ C0] ? rcu_check_gp_kthread_starvation+0x1b8/0x220 [ 991.895525][ C0] ? print_other_cpu_stall+0x150c/0x1640 [ 991.901179][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 991.906122][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 991.911170][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 991.916382][ C0] ? rcu_sched_clock_irq+0xaf6/0x1200 [ 991.921762][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 991.926620][ C0] ? hrtimer_run_queues+0x163/0x450 [ 991.931829][ C0] ? update_process_times+0x147/0x1b0 [ 991.937206][ C0] ? tick_sched_timer+0x386/0x550 [ 991.942234][ C0] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 991.947778][ C0] ? __hrtimer_run_queues+0x5a7/0xe50 [ 991.953173][ C0] ? hrtimer_interrupt+0x980/0x980 [ 991.958288][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 991.964427][ C0] ? hrtimer_interrupt+0x392/0x980 [ 991.969565][ C0] ? __sysvec_apic_timer_interrupt+0x156/0x580 [ 991.975773][ C0] ? sysvec_apic_timer_interrupt+0x8c/0xb0 [ 991.981584][ C0] [ 991.984521][ C0] [ 991.987451][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 991.993621][ C0] ? acpi_idle_do_entry+0xe8/0x340 [ 991.998739][ C0] ? acpi_idle_do_entry+0x106/0x340 [ 992.003948][ C0] ? acpi_idle_do_entry+0x10f/0x340 [ 992.009153][ C0] ? acpi_idle_enter_bm+0x5e0/0x5e0 [ 992.014359][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 992.020369][ C0] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 992.026028][ C0] acpi_idle_enter+0x352/0x4f0 [ 992.030817][ C0] cpuidle_enter_state+0x516/0xf80 [ 992.036029][ C0] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 992.041418][ C0] ? tick_nohz_idle_stop_tick+0x238/0xad0 [ 992.047172][ C0] cpuidle_enter+0x59/0x90 [ 992.051614][ C0] do_idle+0x3ce/0x680 [ 992.055768][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 992.060987][ C0] ? rest_init+0x31/0x300 [ 992.065340][ C0] ? do_idle+0x66a/0x680 [ 992.069596][ C0] ? rest_init+0x31/0x300 [ 992.073929][ C0] cpu_startup_entry+0x3d/0x60 [ 992.078703][ C0] rest_init+0x2da/0x300 [ 992.083040][ C0] ? time_init+0x33/0x33 [ 992.087375][ C0] arch_call_rest_init+0xa/0xa [ 992.092154][ C0] start_kernel+0x496/0x53f [ 992.096669][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 992.102589][ C0]